MAL-2025-165114 Malicious code in riyanto-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc73230c314e095a97752b155b0b26d5c6bcd457eeec4c540054810b54aa96c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153322 Malicious code in avminh-afagis-ifadfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a4237b7ccf15c98463719e3f7653db3739eb9c3b471ffd497940ebbdaa6ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164685 Malicious code in rino-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd093af895f7562a2b62d704d301258d53159cf3377cb46eafef14f63d1a6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151226 Malicious code in abiba-aluabai-ayabauta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd4c4064be12948f3d3861a3ab72353907a5541fbedde265604d7039efbded75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152933 Malicious code in astia-ala-malikafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e9ccb95c1d43b4ad70fbc498d5cc15f54351258f9b36fd53ad50481c5e95cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149958 Malicious code in @mipta1/asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6baafae6103b4d52636c20e9056676fa2b0051f41794b09ed1793be325776a73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155481 Malicious code in guras-visa-kore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2905d7946caa812ca9ebad256eb59fbb1c13926e123185b3962fa9b6c798949e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166489 Malicious code in sunderlan-uyud-vamukaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5a6a11ebc4ef686f3180c46e00004a30392b9f3429d34fbefb994f6ced1062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166452 Malicious code in sunderlan-uyilud-vamuikusuabavasiknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16def37420421af35dbcca7777dfbbdb92692817d4a9826eb510d4fdc87ec89d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156701 Malicious code in inufgi-gotumafa-anfafoaaaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fad50b9be4135a0acdf3745c34c68a914bb87262897fcdf118b08ac2fcb5612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158936 Malicious code in maalasha-nut-posisio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e0adb48639946bda92df99e5a786d4aa088516300ff643c9db9c19c9ba1377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168692 Malicious code in tealove-reborn18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34c9c8db26034f754ec5071a65dfc91e54551c08dcd522ffbd94e3e23e07efd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169065 Malicious code in tehah-nuyadtasfag-munra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bfbbf3e64969b5e3109a19bfe161a98a6e1efdd50f282f06a7d7c9193a4bf09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163426 Malicious code in nokire-sekiya37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410af9a6f3a201bb164af56317fa75f0d947f866233a97bc3da58f2436adf99a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162846 Malicious code in nokire-lokcek88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f06454e5651feacef0d7d3ee29997094edfc6673fd13442f066656553829e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152957 Malicious code in astia-alabokio-moikaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d308aa2f67c9baf0c60728f369b77d4d3bdb03734e61e4504de19438397747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150358 Malicious code in @mipta19/dggfdhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825d6508528d004fea0c43bd5e8c3a8666fe45b18f36fdd9bab90a2030acd846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157880 Malicious code in kupai-lukta-igau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ebeb9d97ae07923b3ba0b8fedc6ed2ae065a10bf7960917a804870d849ff276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161030 Malicious code in musik-dai-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36c39a063029777138b3ea1d1d2f7b8f40710568da03f9caed681d12fba4f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170234 Malicious code in uyifiuza-iytadut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 346006a8cbfc7c16b0be7c08985763955d05e0577b1ec34a2831a4083af49517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...