MAL-2025-152041 Malicious code in air-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91c16cd439b4359c36e0a4ad6e526260fa463e518c7d94ab12f165b345aee5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170470 Malicious code in verify-taic-alusaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8103fe83a0fa8ffdf0cfa702ab18f633e5bcfe00e57407f89b9d896a9c077b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158715 Malicious code in lookingan-namakita98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6d7570cbe6b9445fc9430a7080bba7cff1cb9d70f38f2fdeb0efcd51d206bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163963 Malicious code in parwo-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259ea68ae57a36f3eed9cebb0ab1e0c8ebff5d1b2936cb39ee3a45bb7f22e748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154221 Malicious code in dajouka-tfsddfcdd-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e35078afe41a8b23918e2ffddf09d5b6d783c2157b243f10f2c05cec7671f932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152057 Malicious code in aji-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9b914fe593dddf32f289924ccc558ff16e6e470cb89a44613f217bbb676bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154726 Malicious code in dioalgo-kloip-akagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e09615d51f2245a976f14890a99d0bce8051cf968147e98f1a14d766189bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166561 Malicious code in syahlan-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cd961ff834ff9d0fd41e54cda3dbbfb94dbe72db38447294b24063ac97f8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160563 Malicious code in miracle-dokoi-unisakiaoaiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59508dfdd579f304148210be6ca664b6e0f414f6e797a84d7db8bf0128c98553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168469 Malicious code in tealove-nanami4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea4d9786efec27cd7e202580477c80cd37034d65eea14e5689a7e8b421d0231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153113 Malicious code in avminah-fagias-iffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c71292ac706619312ac22fa3d5d9cc1a608e28b7e6f1dff675f506ee968d27d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150915 Malicious code in @miptaa02/reyua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35718d0b3da1196ab42857ea0935e4a38b96e7ebbdd453a21bd2be6f7421a9ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167181 Malicious code in teagood-nakama18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee0243d094c2a1acbe61e67dee6d0d467bb4c639cd7994b287241fd70c433c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154001 Malicious code in cara-bsunssns-ajsausnsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca43cdd2b4174c4a7ac6670f0b6dfb90c5546f6fe5d754817ce7cd7e790eefdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153604 Malicious code in azhar-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ca057fb4f1f4047c0f50815107a59bfcbfd1e7596bf03aec021475f7db9d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155972 Malicious code in ican-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa1cb93a76fcd0f64ef333317ab6ed1d7373e9799b9389a4c44868cd8a31814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169291 Malicious code in trevora-cir91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2052cf14a141b39d0293265897296079b439f2d8cfa4058d63c629d66c223125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161890 Malicious code in nasrul-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f2923d0a60833ec4eaa4704329d3bef8676e8f2b18847f3fd287f10d5950e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160336 Malicious code in messi-sdubda-sdfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975abcbaa1f057db3a7715b3c47d395287dccd5469c67623162cd045df96948a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163903 Malicious code in nustar-miuyu-nutyufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7642e11c7bcdf3fc771c135d38a9fc0b9d0821064fa40d7476bc130b9b7cdb41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...