MAL-2025-156472 Malicious code in inal-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8878cc3a3f33e73f1a499061233d75ce89054e7e5ed96195ee32d2af9fbc36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164665 Malicious code in rino-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07efbad554bbee7cb8966118c993a5b20a073613f42488b60631a32f2d7c79e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155360 Malicious code in guras-adast-asda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7134107fee8a63bbee128c1c71f46b42e874a9bc1f23f56ada0b4633911d87f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159270 Malicious code in makani-aiba-ufga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9c420c4fddb5651129d9128080dc7f1f3bba89cb9b4444ca129ef66fe5fab5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161636 Malicious code in nabuf-otomabin-njsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ecdc2fb593a4e7c053995150d68382b9c22f55498167c316a366aac713532e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150604 Malicious code in @miptaa02/fabg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eb9b4d9cd8a65730c7279dffd47441a4b346e36491554593926af84d94e1ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152885 Malicious code in aril-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb86ae8e0b6366ddb8a605d77ed5beb375886188a790011c25ba0c953874548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167165 Malicious code in teagood-manaki95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b52c87ad44cf1aa16fb242db5463b608b23b9bfc6ead088526cffec8b2cd645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165900 Malicious code in shilang-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d1a78cb30b638b0202818c6d3dd946e0bd6d76838a02e4e6e458723340ec16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169395 Malicious code in tusaaya-sd-s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e95799d8502d5f569614f75649dc7e54871d4c2e508deafd899473424e44ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163176 Malicious code in nokire-nana24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55fab8903f864e94d3faace2bd922543bb3c90162a6ac15eac1da781a78be1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152655 Malicious code in andriani-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a37e717bdc29dd739d63db1d208a016065b5cd726929548d74514e3babcb21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154612 Malicious code in dian-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528c488b13591ca71ec96a76fcee462fa09feb4f3e05acef3289e68c2c12f950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4127f3376a6b5123bbf0ca9767e9e4ebb555c9804d798bd83810cc5a2dbd950d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyati-dyrfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11197024d207aebc5f23669feb1cacc869f0508089b78e9229194d5ca4409f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75950ad3b2d188d82e2e67ad33e6403d6efcf7175c8ee87c7559100ef27c321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmdas-diewogrg1aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0743a48753b60ec233fec9f638f8a4fc9abcabdecac4e70c7c31f5c0adce75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salabunuli-naliki-lusbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99404ff8c2ea25b474849425e44ee4da5355d6baf58e3860aefc33385dbfa835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704caa34bcafd281bd5307c3fc705cf4e66590a44e21a3860a17d91098939e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156443 Malicious code in inal-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39c49b9a22d233b38ed77edb552c7ae8bbc46bac1d6e0ca7d1eed98bd082258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...