MAL-2025-163985 Malicious code in parwo-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3149813cd96c29ff7c811c175bd9034e12068a33ee8ede1d4b8526679b5d817f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157485 Malicious code in kapvino-somgamoi-faoagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b821bd2131d461285e25322ea690a5b1d6726f7cd38825f42a3e5c6c5590cb3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163350 Malicious code in nokire-rara6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ae463149afb73f5e98b7f40f66170f62029e82d14b5536b8c71108bc81cc27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169178 Malicious code in trevora-cir124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5aa672185a600b8b8d6d2da03cc1019dfded8697e29ba2fd0add5fd1740ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165731 Malicious code in samehadaku-qszess-sur7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7d09b4cf1dc60b388670c6e71f9b6bffaa73d62039f6efaac5256bcdb072d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160548 Malicious code in miracle-dokloi-ikalusak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f025c49b21e1367be3d717db40581f1c2fde3b6812a77fe4c98fa7dc5cc60f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159331 Malicious code in manadi-scavior-addo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35d5d1b41b240f72f0a01a2b60da4e81e490808ecd8f2a5f73aae70e146e96bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150008 Malicious code in @mipta1/ersata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4248a2157209e494d4100926bbb7e699582be8f66fa4212209a652f071631c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160755 Malicious code in muda-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bdf6e0691822d902e14b4925aa79e44884a0b9b266c4acd917fb406e9e3286c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164264 Malicious code in piluvaika-kaiu-nunubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d3ca6ad9e52366e70b43e2564cdbbb4ea75e64e8411a5d2d83322b75514c993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168310 Malicious code in tealove-darknest6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ccefeec19d76a58a018dd390a433b3cfac82022c449918a8f7be9fb1883dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168730 Malicious code in tealove-reborn7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7707c4f795e046df933673221228e12555db2f9fd68e5909647037c4b4537335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163736 Malicious code in nudela-agaaff-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638e0c36f6f98decf7c6c013ee6dc92ea66f3a131c63243a1f9ac25a511c282b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151978 Malicious code in aibpuna-mobiuple-amakora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040a434589bc8630951afa4db1b32dd40feaa5c3389ba221b3bb81ab5efa2d78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151041 Malicious code in @miptaa02/xdz2rdtj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483eba19755acc71733826a3cc7f3120553f4ac7fd6d564fb830971fa4edcba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170212 Malicious code in uyau-tyat-daut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c9d18f2ebda74781b6ce0ddea30f52afc39885a958a25929dd2edb184c05af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152518 Malicious code in alvira-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15bab9d19ab308bae1f20b8095eac26aef25f9a033a726d25a6ff7f4b8e9fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150815 Malicious code in @miptaa02/lzkk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72cd1ec845b8dc727e0e9e15713022c9d856cf2585abbb889efb1bc29cf21e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150441 Malicious code in @mipta19/seh-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4346ce73d3f136c2df7e2933b1808916bc27649bd2a5c65fdab63c3336adb5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170547 Malicious code in wulan-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35122b198300a446e333c58c850b7189fe449f21f2ce7e75b3261f2d7b5e500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...