MAL-2025-151989 Malicious code in aibuna-mobiuple-amakora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1b35deca1f30e9b278b05b52b1c7c7e182dc735b3ea3ef967cbd4f16980a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167823 Malicious code in teagood-sukuna67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08aab3dd297a27a04b758fe33e1bb2a555349dab80e205ea9c404e397f9a67b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166166 Malicious code in suharta-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6cb9277a092cc6b05e251fa105772a11be7e37711484a2fffdf2f44277c329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164929 Malicious code in rita-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba91832227a8172abeb52e2efc7c3e354c0cdf1cf1c47fb881043aaf5f6ae243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164587 Malicious code in putri-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8f0686b2f7857216ed97d0c7adab26c9459621aa84a80479d2aea9c174f42e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161890 Malicious code in nasrul-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f2923d0a60833ec4eaa4704329d3bef8676e8f2b18847f3fd287f10d5950e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166916 Malicious code in teagood-lokika50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f94cfea582c226968e344aebc02571cbd7c77921992d7550126a2f1a665aa983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157073 Malicious code in jimmy-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e2ed41563f3a667328cf85355a7372decc00d90be7eedc511ac5b965b130a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155972 Malicious code in ican-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa1cb93a76fcd0f64ef333317ab6ed1d7373e9799b9389a4c44868cd8a31814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153604 Malicious code in azhar-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ca057fb4f1f4047c0f50815107a59bfcbfd1e7596bf03aec021475f7db9d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166632 Malicious code in syahmuda-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8c0531b8db22766a1c350dde15712b72c87db037581185ae98136f18393557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169291 Malicious code in trevora-cir91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2052cf14a141b39d0293265897296079b439f2d8cfa4058d63c629d66c223125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152041 Malicious code in air-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91c16cd439b4359c36e0a4ad6e526260fa463e518c7d94ab12f165b345aee5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163390 Malicious code in nokire-rara96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8acb1982a1e3da6784c5771fe22aca54d9ca41da84724ef5102f0a11eaba1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156574 Malicious code in intan-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2f9857f9f6ca01ce21dd828e0477acf8af667d8f3b7c50dbbde80e9c0baeed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151008 Malicious code in @miptaa02/wea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780c78b07547accf86d9aa772da84f35f6128d30b0ecc7ed1e42e18b377c7460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167533 Malicious code in teagood-nalikoli123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4288e5598f9e5be66057c4f3e231f2323cc7d452f24c0bd0f8b399b030fbdef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a2d3bb78ce37f26b01b91ee9f5555d50d682908c54eea84f46dc88edf5b25d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ee0742dc652f93735573498a9ddf8b9a7cda44ef6bf8ca9005833d1b4e7bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-mau-nmafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8acd7280a499bfdeaab658d456d94962bc84d5bbc35d0b78ba27fab1ba1a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...