MAL-2025-164413 Malicious code in polymedr-minaddus-buie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf78fe611686aaf38542eb787dedcda1152d5ad77b98075dd07169a73f46ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167842 Malicious code in teagood-sukuna84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99051a4bede1b9cea5057b47d892ba47b5a3528d911a5367134abf2e505704f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168606 Malicious code in tealove-okta29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c169d35ca63680bbed0286c92c9fe2f379a7cede3924b9558395a9278d271da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162399 Malicious code in nokire-arhani82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c7ee581fd71716675251cba1b4713771e2ff5505a8ef4df2c8144861ebd997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162054 Malicious code in nedarida-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec0d62b94ccc695eeb637be495fa6435afd5982e509b0fa2c61c5da0eba94f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154502 Malicious code in diago-kulp-kabuko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d76d15f8477581a538d54a97037e543ac1c8a3e8514ea39a2db40ae9e9939ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156244 Malicious code in ilang-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e7a541d5a5aef2798e4b91a4bd2aa4092ebcc859a8f87d8728507235c1570b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160754 Malicious code in muda-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526bc08480e645d761c1d0c9e2098019b12ece3979e89758f59f687fe5e5d545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160196 Malicious code in masioaluan-ofai-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419ef5432e6c5d27b50c6fbf40d4dda2a6de429455de664453fc07626580c71e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158305 Malicious code in lookingan-konami44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c840145a5e16f2146eaceb7e7b81ab6ca65722a404126dacf6b2f3e20f7b23c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150928 Malicious code in @miptaa02/ryua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fb3c22bf51dc614dfdf04656b4641306f2828ece12e3149803215936b72b1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159731 Malicious code in mansia-tavil-madoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 613ee38599995f17fdf6206052629b5b242772076e7d5f09dc1911d6435b2fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158964 Malicious code in madan-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8b5a83a44d3c38e083e280a1fd40a40c038103218ac7dd618790bdb9561ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152379 Malicious code in alita-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e26328c8012fbb79823b8015c0215ab35fbe906e325565d93d6e13a2085a2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168074 Malicious code in tealove-aruma2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75563851b0f2924649cd728b838b87623a6fd2855bcf0ab0087b021f16d18e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169606 Malicious code in uarg-mthai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 911d842b8ebf11c8a0ec394e9e365bb3c5ef8aff855aa7a91d0f0fd77024a200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163656 Malicious code in notr-ucl-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6736dd98f43e3f0f4cc8e8475582e4ee2d892941b69c7363c9f114088d428ede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163256 Malicious code in nokire-nana97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2267be34d317b1ac31d1364464bd224cafbd8f15a0c16d106353176060075831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170348 Malicious code in verify-ayai-auioanygial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87cc89d6ae2381f18095c5a2cbbd8b8c32435831ee99bc7bc4556093f6d9d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155932 Malicious code in ican-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca289b9365487f3e2c0bd1413f7565a1260047919dfab79ab15b570258a4df1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...