MAL-2025-152376 Malicious code in alita-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d8cb415430db290e64da4f9adbac0436841ede314f7e208e51b1921fe99330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166139 Malicious code in suharta-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7477c37b10e739a43b8e254e7a4df86f6f94697b57d604406b25de0c317a3fff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152453 Malicious code in alvira-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4682f39f318473bccad3e644f2ed4f532d3749a89cc4b97acdc2996dffd5017c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159233 Malicious code in makan-amoa-iuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac47cae83d7cd2097770953c516e2aca49df923e82c512ab18617e8f001e355e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151356 Malicious code in abina-amoavugoi-anuianahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66e516da0acabc4b017ef244dbb75d707c13a7fc8e528cfdd591d7149f58789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152965 Malicious code in astia-alaki-malikalahoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf95752b3d1e016b84e626dad5228ee8cb79a7e4f22f83aa816d59d5a8d44a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156496 Malicious code in infi-gafob-jagitga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69295d84d226a8383c8fb59e7f24a8ebc4fb78d38a85a277cbd496c3f76a9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156855 Malicious code in iqbal-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a77ceb9f596aa5c0d45d339c1226ec41b3ea59949b04a7e3895d08659d47c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161565 Malicious code in nabuf-otmbin-nuyasfsgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 314953de707ed41a2b452091eb2cdc382f76eea2a873cb61ad2c6791d0af78ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151796 Malicious code in aiboa-miolipe-agatama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dcf3ce2b208435b68cf9f9f5e002e8a58041490873180862646039c987e0f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151068 Malicious code in abang-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c88dab92de0ffd3a4fa5fe8653f8320544ecc17fed8b9082a0b20683e25e65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli150 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4a105276db4d57b063c515af72d407f78ceb44a6f143b5ebb71bf926feab3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154281 Malicious code in demdadf-sadudar-adudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc43d44b5cebdfb785378ca653413883c4a6dbebd44e4163ea92436cc8b2d006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162045 Malicious code in naut-tyutu-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eedeecaca47930e6d81eaca14d5483b9a8006c2aa2337b015c853a56c8d5f884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150841 Malicious code in @miptaa02/mita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3465c8ef9cdc52b50ec0a0db23abcff5e4fe4c7bf1c88ff6508f4f0c827a22eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163700 Malicious code in nudela-a-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e073b6dc495cd658d7e1235a24311cd74d89bb30fee21bb5cfd3478f7c09568b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158938 Malicious code in maalasha-nut-posisioni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3af8c29dfef0040af9032014bc47080909208c988725a77ced88c406bce0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164369 Malicious code in polialozina-aikki-alanai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8842e47f4d13446a4e9908428a67364578d11d82e5c1f992b14220c3e4a6d70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159960 Malicious code in manttu-nuyati-muniyfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8579cc7439457b4245356f8a1dbfa755791514ac8776bbf62a6223514324d6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166014 Malicious code in slamet-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d1e25a1df091a3f397e934b11e60fb97341af4ea648911a3f949413286ec54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...