MAL-2025-165114 Malicious code in riyanto-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc73230c314e095a97752b155b0b26d5c6bcd457eeec4c540054810b54aa96c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165011 Malicious code in rival-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe58427335323806af95f4df9b47752040926c434a229a75214239e502e98f23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165156 Malicious code in riyanto-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9a1a402cf0688b8cb73b10881db9488de31ccbaf8a2ded66aebb711912364b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150807 Malicious code in @miptaa02/lggh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2fee1f7647a1ea5d21b9ef5e55c5f5065e106873877b615afa931685aa7f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164243 Malicious code in piluka-kaialbu-nunai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f585154f382e0649ab232e8821c6b48e078c4b0f373a6bfebdbbc3ce93871106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167988 Malicious code in teagood-yakuza30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fa58666d13c977aa93cabde83d8e6c2afaf3e0e1c52a8d50913db3e13eb647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159185 Malicious code in makan-aigoa-iadum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f77629df2badc3dcd66d2003cc818c52c1861a27afe6c69aff736260d7df898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158824 Malicious code in lookingan-namalaka15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f45acd51aec5da36ea52acb6543435fc240da0528197af653f41f4914f7a692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167203 Malicious code in teagood-nakama39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53de249f33ebbe230f8c7de2eb2bdf7900f0243e29b07b79ac4b237b971c699e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155680 Malicious code in hariyono-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41ecec4666cad4a8322e0ff89050730e33b18cdaf02f3ea052201833cbc47569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154923 Malicious code in fadila-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be11ae8a200c96cdaf0c54ddfb6731714b136d0a46f124d872c6830032fa3a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168786 Malicious code in tealoveness57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc15dc5f2eaa54b939cb6db5b6d7660511ebad72527392d7b531184cc2280325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169441 Malicious code in uafagarug-midefafi-fatusut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02f7be98063fa205aa4f0d4868c085fc993e7a85ce2e25352c24397cd4fbbae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168219 Malicious code in tealove-dana14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9338b3ab86b07593a2d3441af00d49469068348088faf23a2cc6d738b3e555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154295 Malicious code in dia-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee42eb8df0aa941d8f0cd50959de8470784b289a07e282eaae127b5732828012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156322 Malicious code in inagi-vma-nuagbarifvua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d57602be73c1689a9f7448f5f0059c89d28330c2784e41e592894de100851299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150403 Malicious code in @mipta19/pjusr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91319c4ffe4e8f2158cdade5b0b9b8b82686117cff95fc1f4131286d2aa586a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150876 Malicious code in @miptaa02/nyaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d9d3b5ae2e0b4217e9adf4e59a8268e5d25bf0a48f7288f4bf0d1a09750566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151604 Malicious code in abuibanua-mobiman-arta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a2dded8301607796db23eccadabf5930bcd43b1d2e12285df0aa4c2bce2607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169975 Malicious code in uinsu-lot-bismayuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a91b00c34774fbd5232caf79e3dd52f8b3f0dda33803db4ef35b76335ca0f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...