MAL-2025-156207 Malicious code in ilal-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3296c93ae306fd15f4e097fdcd2a9b6e65890cd5c326501ea92842a759e3e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160172 Malicious code in masan-ofalib-baivula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d14e5a0f8c65c4e77c0456bb2056bebc1e4b036618011a3f6ea1189488f4480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164743 Malicious code in rino-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15570af979bf2047ea4c5d58abd602d1d9ceac5ef00eb68992643fd5db9a403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150691 Malicious code in @miptaa02/gfud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 297623e8e05c32953bdf684bfc70eeab1c725b5452f8ffb4eef613837178882c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169543 Malicious code in uaragifa-mar-sa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 931bab0227f31ea7587f5c8dd773fea4c98436e4af5c9fc5219b54cca0712879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151647 Malicious code in abyia-nika-luyai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5608210ea1348f94e4d9878cd717bf7bd95c221da2038e5b1e2287c67f94ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162067 Malicious code in nitaaus-s2-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3007ce29a24a023413629665731097fee68e9efbcbdd5fa89da71ba867bd2fb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155534 Malicious code in gurs-mipta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c6fbec7b60136a8d1f30303243bde415f74cfdc86638f4f7de4394628de1759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162808 Malicious code in nokire-lokcek52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf3716569ae0d9383aa94ed0582b292cfbc81794541de739af89ba0225804ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166476 Malicious code in sunderlan-uyud-vamknaiunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9796edb3e39af1aad516a7b855c32e9d4110fa6ec9b4bf7427cc103e69a8d33e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156548 Malicious code in intan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6be42f4cf9a8717e338246cd6d01c2d47e041316a1ae7288d798bf8ed1d534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154088 Malicious code in cinta-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0007242135cf53223b6efcd1da50868ebf064aa8c9228f47041748ca9c34b87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164996 Malicious code in rival-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b089765145552e271c9afb51aa247679919740f304d972393e029bd3ce8cb96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150360 Malicious code in @mipta19/ej-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50534a8308e292208a1d9028a55b196a8bfa1409883793c4ede4214fa04d86ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154015 Malicious code in carsa-rdesti-terd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781615395341719acbb2b503b8428249a3130aef2e1b11dca5ffa4c067bb84a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167569 Malicious code in teagood-nalikoli17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5746f81d422c40a3148fa7f63839325dbf6443adc526ab60265e728537b27d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165783 Malicious code in sau-naki-upsidalumae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf5f9ffa291d6a976388ef7b4b644f8f274ef70ca0519858bb94c1836ac0fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158208 Malicious code in lintang-tea48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da090915ef353ecedab468eddf5465977ebeecc0faef1cb2d0c409d3b2cd785a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154973 Malicious code in fadila-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e647c462c37aa0d62d849648354f65863b5e860f81e969876515f36830405fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163781 Malicious code in nudela-gagaghagaffh0fhf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae2099cb4b91114e4c2910b6cc8fd816e364fc6ac82f8afd62594e31820e476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...