MAL-2025-164652 Malicious code in rino-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68aed14ffadd09a342be17ee9bdb0d6af66cb3649f834e9764655154d461ef87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155972 Malicious code in ican-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa1cb93a76fcd0f64ef333317ab6ed1d7373e9799b9389a4c44868cd8a31814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155925 Malicious code in ican-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e3016bc6c2a26acf6c94ff385cc0549911e3c2267a95fcf6fc78afee8a9995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169642 Malicious code in ucok-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca986640e10f94540a3a05effcb5c62b7c80b0e5e3c2285c16479cdaa55f885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156553 Malicious code in intan-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e984bc862c2849f9444e570eb183ec661a9d44b5787d13ae2b065fd4310cfb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d7ebc8cfa4ebd752825dcf984d35b8b48a1262a5d55a18a5103bf1874c62403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166328 Malicious code in sunden-dibuok-inuikinuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85fc0556c692ca78f6a3b0e91b348f6259aada53755fd223d6f7cae9bbd199ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154001 Malicious code in cara-bsunssns-ajsausnsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca43cdd2b4174c4a7ac6670f0b6dfb90c5546f6fe5d754817ce7cd7e790eefdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151030 Malicious code in @miptaa02/wia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a80c8c9c7bd277a68203abae05bccbab756bbc07ed1a127fad94392c0c290a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151799 Malicious code in aiboa-miolipe-agatamuaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55274bf91f0a87d1f55b1520fbcc6e227bfd96bf4d1f830716f3e02fa3524d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154891 Malicious code in fadila-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d986b3ef44d955d6ab063251509cf6c2850e32f4adf7b9f3c55fe7ac33f5d10c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bef34922534e47f33a6ce47d589012ff44d96e14e04b493233c59636e7620bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170206 Malicious code in uyau-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff39d24296193e3b13f30111d056812c64435b5baaa5ab876b91e9026f5b3a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160812 Malicious code in muklis-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1178e3c0f3bd7ce4923406927a1543ce4a692fcdf9534db2891f8fc4a5c5709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165118 Malicious code in riyanto-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb86b9939bb0e84f9d18a15b7ed91d7d4f529ccc1fdce2b2cfbec0bcaee57d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151418 Malicious code in abina-mibian-upabomumia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca80d317c458c62359185bfa03c301e5837732866aaed8366ed4219a01cb5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164602 Malicious code in ramadan-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5daad1f0a0a11dc9c61c35f875de722c21915b09a85ac2fd82736d187266f53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169293 Malicious code in trevora-cir93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da579609b4128f8a5ee64e657db5ca632d9cef02c0150ac17ae7326b248b93d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170212 Malicious code in uyau-tyat-daut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c9d18f2ebda74781b6ce0ddea30f52afc39885a958a25929dd2edb184c05af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158235 Malicious code in lintang-tea72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6105c110de9befa8c374de8f5e7d94d833b7e92b5f8f911a0ffe2d22c51fb74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...