MAL-2025-156197 Malicious code in ilal-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5a9d18134222621b77369894eae87bcdbd90ddaae57880b6ae07d030c0c97f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155247 Malicious code in fitrok-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 950ef80b3f56a7a8d7db82dc5261d4a1dff42dbc7e624e213b547728190ca1cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150555 Malicious code in @miptaa02/bvvb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91cde8bb52a0cf0bf82cee79240ccc1265b76cdd0640d0dc8a54d874da8d386f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151338 Malicious code in abina-amiabuan-agu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078c2fec9d78184c47847ff2edcbcaec1c62ac4d78f41ccbf36818ed5d606f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156839 Malicious code in iqbal-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce27ddf328076ffb09bd4e0082f5375eecc8c77949318409d449b4a39a65f267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167546 Malicious code in teagood-nalikoli136 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c758fd48a89ab64ba3fe9a4ac8410678a5242ac32a83e1a8c40e6c18d666066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153996 Malicious code in butrui-muiko-muyiaksf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf6439f20176f1f271798897e309b43159716407e51361d892be284f610bb1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166927 Malicious code in teagood-lokika60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a037d05218e18dc0f7b8897b0502293990f4dde0320585ceffecaf0f44d37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157527 Malicious code in kentung-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd09cec0f0d66909fcc590b7fa1ed129e1e0b1ff0a8ae5106521e76d1276c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152953 Malicious code in astia-alabokio-maif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44193f1441e7bacdb3f9dfd37fdc09f45b9bf33dc1901c8b182ff96d5f448ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168491 Malicious code in tealove-nice14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c91359d00d8452be7cdb604cfa9e82156eb03e40392b6ff02bdc1f4b51a689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166557 Malicious code in syahlan-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a28a9c327eeca8aeb99a6db2bc281e80e4b803fa081823861ee8f2594a22495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157022 Malicious code in jeep-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b575a63970308183fa8c9aab32d07b37cfb009778510cf7271e3441fdee2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155663 Malicious code in hariyono-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b9f04e420fc1120dbac7c32f42573afc5c589a9e8f2d57d6c5092c9135a680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162175 Malicious code in nokire-abimanyu6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2ba1ae16c5bccb4d75eecf47bf53d0d8218adf7e66806c54518908a06797dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163429 Malicious code in nokire-sekiya4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c62221a8edccb0657dca156a340cf551edb7f4caf3c6be91d94be49813cb6438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162330 Malicious code in nokire-arhani2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d091fd061efc16a1a74a9e3061b2b7bbf1e53dae644f7b1a9c29430ffeb598e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-nestjs-gravity-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2945766e719b272c5befa7d59051355b159245ccff670eefbedbfc435046b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-private-element-ui-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5256a58de5656427ce43274a191ffc9eef82d97edfae23fa63c7f134e0113a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-commitlint-config-angular-cypress-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27fabc8b6619c335527c49d2b8fcb85fddd7995173052888ec6ff565c9fedff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...