MAL-2025-164709 Malicious code in rino-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e8fce296f9f5ea02660e629231ba9a10ffc4c9282432829aff9d92ccea2300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155290 Malicious code in gifa-ota-uauafdfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39dc4e206f8c760992513e318679f0cecf09e38a6c498bf71a3942107ade9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169593 Malicious code in uarg-masituhai-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9dbe533206028880efc33fa2ca677761cb44c702a2623dfa5e8cfd8ad4449c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156942 Malicious code in ita-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceed00085c980ba8e71a7bb914ee847987d43e20d95bbc76eb0c7feaa4a7f823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157318 Malicious code in kamasada-nusata-budnajsadab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9dc18dcab9fc1c17b55e4eba61dc958ab571833cc81e41bfd346ee083c7bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157944 Malicious code in lala-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4649ea94558666fbd3a67762f35e98384f79a22e631e64240b8fadc4bc9e323f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153662 Malicious code in billa-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c97818d83a489ed7b4e65aca7ecc9317b5900eb8dee40f2c1c0aa3350ff7f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165251 Malicious code in ruji-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5458bcabbcaab16832e9e284c6051c0ad8fa7f5d0d541c650da2b8b647cdac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160109 Malicious code in manus-tavauil-maoihabati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b23bf7521060a862a44f909cf61a40a7c5207a01f1b9091a6f23999e5ebaae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155820 Malicious code in huda-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c565c8de234b6ffd851f3107d141d5a2c0c0d27c6860092cdb9afa69d865dc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153604 Malicious code in azhar-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ca057fb4f1f4047c0f50815107a59bfcbfd1e7596bf03aec021475f7db9d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159197 Malicious code in makan-aigomoa-iutamafafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c2a5acceb5441fc54cba624b9e557ecdb8ffdf0d7ae978936b8bda5df73e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169642 Malicious code in ucok-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca986640e10f94540a3a05effcb5c62b7c80b0e5e3c2285c16479cdaa55f885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165138 Malicious code in riyanto-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d712134482c7f972c54740b9ccd238a34224cabf3241c11a3985d2a5f50ecde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150096 Malicious code in @mipta1/kfdadds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2b42c08284828a97353d27464928c533b7872565d6a181eba9a7960642a530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160085 Malicious code in manurung-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09da7d8a38a8f948380b68d99990212876b2030794414126e58918a8ad50ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166652 Malicious code in syahmuda-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 327ded663f2d9a4e14d2bb45206d05ff9acc1f15b8cf143618a29f0b53e863ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156571 Malicious code in intan-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3352e16327f7d0620ee9a4109ccc31a3d9a7b5d62998327471f46c844efce44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162767 Malicious code in nokire-lokcek15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf4cb4d12a32b466507bf6e3cf3331b55f73a521d0bc89648e4428e78f5e23e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyaig-bfugabafit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e105b14cdb0c69e4bdfae5d05ec7e3a26aaa98a2de9282a5520eaa3739ffc4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...