MAL-2025-164977 Malicious code in rival-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724d3c05c865b5ab3b5d9a8ffa6818b60f8746a4c5993026670a7e372348769c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155245 Malicious code in fitrok-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02b7b62c95a1491f79e9dc5833d01944a3ec4ad14b86fe97fd3441ec9d35eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151762 Malicious code in aciyua-idusut-dajr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5856fc2f9617d380ddac2c0e4f7c1b3f8121d8527cd0d332fd56af5afb88a983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160182 Malicious code in masauan-ofa-batovuila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5fbc712c4eea7e4f5c1782babc963680361e250beda10ad81bf048298c92b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165415 Malicious code in sabua-muuyfafu-dafufufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5722c1f2beb993ca64b3c938a28d65d94cdd9d06d51398c6c521e81c9ca60a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157455 Malicious code in kapvino-saf-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b426931f3c2e13b977e6f9c04f187630d4c9290c938ce3e70e822c4f8dbf3c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154673 Malicious code in dioago-kamo-ala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3371a361974d6baba10d18340abf8a98d2837a7f942f44f9a6d52fee3b0f083f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153397 Malicious code in avminh-afgais-fafdosafiafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4fe2aace4c5e498133aed91e955a7f9b59c22179540f59ed1681556fb7983a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161995 Malicious code in nasution-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a788a1b7242d13b4751134e2bf628cb53635063d49c01129c44994d413d565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160935 Malicious code in munir-terd-nasuay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9b8a40f540a52f0b2817f90f167587e47eb21364dfbcd4a5ba4c6dc51d92621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157584 Malicious code in keyla-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a71ef11370ad7654136028dc6e56d56729f64bf9d3d6eb488a2be5793032d0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163011 Malicious code in nokire-nakala57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b1c4644b2d81335a7edf0b6e438426ce271599be6bf38e9a342220c820384f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156491 Malicious code in infi-gafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e71f20347fcfef2050f4edafda83e7fa72f0bc256729ed47faad6a01e82a465c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150961 Malicious code in @miptaa02/taiap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3467b8d073ed1e614268354ab08ed595b8641337f348048f9c111ddebcfcaf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162106 Malicious code in nokirane-asagaka5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e67c5d7169239909b997f804e3d010a4f94d8946d737d3eac5198140f691e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166642 Malicious code in syahmuda-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd27d288298fa83aaa2f57a11e1d31b88d45fb7067249e0fef1f04475bba2439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161400 Malicious code in nabuf-otgigaf-dajaffi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022d89c220aec8f6e35a0a51fa825a91e61eeb5158db284112b6c9e560c469dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167059 Malicious code in teagood-lokina9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3c1d0e440e1b02f2fe8a312f9548ab0fc006cff888574799327195a2850ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152934 Malicious code in astia-ala-malikaloafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3688f017ce9ef36c98d68ce3aa4b30b19f272322e91daa4b8d66fe22d39530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160601 Malicious code in modirai-fiaha-jinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf2c359848eba35c75be168976eb3997cc4817da7a138c362cc75b8ae80f85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...