MAL-2025-155975 Malicious code in ican-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf0efc59d9f9f26ae930978e5140b51f452e1935de4e0e5738393eaf916a5c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154473 Malicious code in diago-kulio-luokafaumauahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263f78d68ba991998b5c9554ae1f6c9f6b1d8136bc883c5c47aba4b5c201cf1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153153 Malicious code in avminah-fagis-fyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9fd3a918cc57a556717002fa9010b20190ce0bb599f1b900bf39184c904f13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157843 Malicious code in kuinsu-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8191de8dbb2e88a75555356f6727562393540e42a0dfcf262563c7fb6641e80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157561 Malicious code in kentung-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435c587df5676d0710608509372d0e6e2867eef1adc17e718ecd7cc16186d412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166018 Malicious code in slamet-poke114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7cdad22f52847570582d24898f3692d64cbde2d5a04937fa4ef7a8d65018ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157102 Malicious code in jimmy-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26443817092a2d73cf2e33e985243bffc954946bb7590ba802b6ea5477e9dd6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165587 Malicious code in saku-ai-upuasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0346ea9fc9bf9a0baf485ed36247a403470f12e0c66d2484901b23d40832fdf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162115 Malicious code in nokirane-asaiggfakaa5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedf65b0cc5d0ea11e044a61c832e2c0aba4d505b5325b361d43c6ae34174416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157605 Malicious code in keyla-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 966dad035e3afeef64989da370f2982764711d9a040a6c5fb6cf02fc553d960c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169820 Malicious code in uinsu-lisa-amu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ffa896a94ca41de5db5d9d589d615f8c3764eded5bd11fc80a6d67f3a160b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150956 Malicious code in @miptaa02/sxdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e5aba43f2d2a67150ed263d17fba1b6bda4d97839eae86a175a4dce41d09cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157286 Malicious code in kamasada-ntai-ksdyasai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ee2fe26fb5365042e0eb31d95a61d9d829512aafb1858469715a09c6351019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166310 Malicious code in sunden-dibiuk-itarunukia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537b98afefb801f4d0e48da38942c27eb6631cd3891b713f61c617f43025264c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161238 Malicious code in nabila-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8580f0176adc7587539afc6121c3ab3eab4ca59b94195f1f83acfe7ecdc8317f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150721 Malicious code in @miptaa02/iddf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6241e33e36a4991c09cac056c2493cd72dd5bf8ba12947891bc4456bc59f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169813 Malicious code in uinsu-lisa-amaiaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85e141a40de5a7792f74106221abeb79222c2f0e5dfa004413a024e33e1e100f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158061 Malicious code in layla-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a089e66af18cb698cd0679695214545b14e378b3c950645c1e7d1e357ab4b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155639 Malicious code in hafiz-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594718ace12f0bf1c491df3f263543550aa3c354217788d3f7494fe10cd1c4cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162948 Malicious code in nokire-loklok9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc135f1ad028f1ce03018c96dd8baca0789c5f451dc7f2989c4b33fd2d49f7fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...