MAL-2025-157078 Malicious code in jimmy-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 343265d7cb1e4e58ca8aa9e76437998e0724b07d95c2f118650ec24a07d17e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154820 Malicious code in ewa-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83a2050d898a68b32f7e8023e66445af3422a564e873e2dc85341d76200c7ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150724 Malicious code in @miptaa02/idkk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c81b159af4b331d9163ba0da21df411bf2c63f73282bace1c47429121bcb997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162620 Malicious code in nokire-kilua32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed55a509c1ffe68f568c7dfa10f7e32190b599a4b0063b84f60b30411cc8951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164673 Malicious code in rino-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6edb0d9a4996418354ceebbcc1084ee26c94389eadcbe88ed89fa78032609a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150012 Malicious code in @mipta1/esddgr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48c715f02996230a96f52b847c57429f010f52f8fea9926b09f6363a314aba0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166599 Malicious code in syahlan-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ab23f0e69db76fdcdead4890a76a74a1853ef6b25c5fb5b87a6c70b4935e5e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166040 Malicious code in slamet-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce948319d64f2be4b2b7fd028280baa53425489438ec016b5a56f7994af8621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158943 Malicious code in mad-nut-beligoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fb809b4793aa087e08c279bca8aca8e098b35265912ec35a96525daeaea7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151445 Malicious code in abina-mibon-upabumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164add95ddd023ece4d79dd4fb2f39df2319f3ed066e52ddb617f7cbbd439832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160505 Malicious code in miracle-diook-uk1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9661c615672173ba20fb67331d87d91705ba1e772c2dd70c2c6b85408a9682f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166360 Malicious code in sunden-udik-vaklikanmumba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 432e920c24fb3a9811ca20be65cc77ab8d01e803d4429feac8993baa738ec36a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156856 Malicious code in iqbal-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5162f00459ca15527c5e5cf499e38543f63d1a38aeed347711807589f48481a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150883 Malicious code in @miptaa02/olaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49f8a463f8eca05bf116efb6376cc710471d8a0fd2f1ace4dfe5ba0a3300f9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151958 Malicious code in aibopuna-mobile-aranaubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311f2a3f04ef1d8a7cee077ba4e34d400ecba59c9ca4d09fd38ecd817184a8a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170460 Malicious code in verify-tactiva-me (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4c3fcc9b033d8f61a8314ab4f9fe3d72f70335aaaf168b93c68620b5f95fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169514 Malicious code in uaragifa-afat-usutfar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93424d8acd1dba822da9c18997db6ac753096e1873466175249e244ee89a408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169321 Malicious code in trevora-liisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce9319828a7e65180874ce6f6db98efedb32a2dddc8875b085b1b0cf6852eae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158329 Malicious code in lookingan-konami66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c953f36cc6a144324377914d234f1223403c24057cf3010ea9b2ec2b3b09222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168210 Malicious code in tealove-coki6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee7e3088e603f970bb9352ece2b1c7c25edba6aad3c8f38431670833e5bd2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...