MAL-2025-164977 Malicious code in rival-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724d3c05c865b5ab3b5d9a8ffa6818b60f8746a4c5993026670a7e372348769c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160935 Malicious code in munir-terd-nasuay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9b8a40f540a52f0b2817f90f167587e47eb21364dfbcd4a5ba4c6dc51d92621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155362 Malicious code in guras-adst-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4243bfd356451ca205a5d3c991e159e2f091c58f66e18795b643347275ac927f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161831 Malicious code in namasae-namuda-baku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6a27248e8e61301e4db93c8fd7544bcb352ac80551df448f37110b8230137f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154527 Malicious code in diago-kulpo-lukahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6bd981bd936913b26a989c37a93a1153ad9f1665629e7a7bfea3713caa2f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156885 Malicious code in irashi-21-are2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7289883b839312caa1d014a1a98d0dd2a601a9f6a1f5ada0e1d864e266de2108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154175 Malicious code in dajouka-faaa-ssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27eda1bb5dc5514bba300ea490c6c8b4faa8e4217636585d356d045d03674755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158882 Malicious code in lookingan-namalaka68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a76db3e400ba25c87c3c95fee9c1cb5a34f10196fef72509a5c4a1ef57e367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160166 Malicious code in masan-ofa-baivula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421ea202a1d20e58ef43a674fa8e9ee0e238c576d3cafa0b121988e666ca91b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157283 Malicious code in kamasada-ntai-ksdyaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee39c128f69044bedab1a4db73831b36474ebbe06c82f7fb93c8dc144180b62d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166339 Malicious code in sunden-dilak-nublts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87387ea2ed497644dc1a0a52bb6ea393bc3306e329c0c4f6d421e8a325143559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163098 Malicious code in nokire-namiresan45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5cf4b2f72703d1ab8375ffbdcf457b2287c9b87f45531496d136b65d0748ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166407 Malicious code in sunderlan-ud-vakanain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dfc6e40f7ff8c87b4aa127dfd6e79e1e43978d12fd19dccdee0ce7519d63e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150190 Malicious code in @mipta1/resadx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3ba2b3ebb7055ec16592d0c86b149db64be19799be95256c450b2c0391d17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164755 Malicious code in rinto-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5329916838c840c3bc93ee336c2db4e53bd559527b81d9e9d0a7e7c368a95204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150770 Malicious code in @miptaa02/ivalm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d4c66893db493ea61c53c44d804451988053835db3dcfb0ea580f00a33d0320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167734 Malicious code in teagood-namakai76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68e5ddc367716a8f64268746e7d4d77bb767fcd9c0f86ae93d5533b294e790b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154444 Malicious code in diago-kuli-lui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478e94a5d9839019caff8674fc13d047a7f889546dfc3049a4e97afc0c599649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161088 Malicious code in mutaus-manis-nubli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d3393d59ae243915f3b2820f2db6f1dd105356d7720c7dc7b06f575f48f07c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161966 Malicious code in nasrul-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41391786e1fc014205d2b7a8f406f9ed47e74cef3c3ae0d581b52b3aed8b7726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...