MAL-2025-156847 Malicious code in iqbal-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad72580e6aa3d669ce3aff32962a1a76a1d549ec14a6b8520000263d5b796ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153291 Malicious code in avminh-afaais-ifaffofda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0023551169380428bbd5feb40c3479aa902c210efa3c41181fb6c896b322f0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165970 Malicious code in siregar-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddce0b72d80459ca9fd7933200cb18a12c35e5dd7bacd9c4940c6d0f627d3a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155815 Malicious code in huda-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9887ecdcfededb15144d2fec8d96777e9ba6f5ece04073256b54085dab715b42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167200 Malicious code in teagood-nakama36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 535fd6e3b174ad6f7af12f91b594708d63431d05425aac2599b2937e64db82f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151448 Malicious code in abiua-moban-atayauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72ce084649116cb4f81bafe9061cb76330bf5ad5f945607abcd6081d8a692605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158647 Malicious code in lookingan-namakita37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12d872d84cedfb18368d34fbcbedcef483211b310044b44ea7e8f1e7e065a05e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153142 Malicious code in avminah-fagimdas-dfgiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27bd6f7276043c0f986e924e58aaeab56f4e1d68f0f8a5da2ed22664dae3cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160623 Malicious code in modirai-fuhoupaia-jasatyfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478ce697d131189faddc7503cbee91c4fd1010c8b04d4fc24352d9b52ff1f4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150989 Malicious code in @miptaa02/tue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f2a6ab1f78ba55c366679b1004adfc730167da976e179b91703cb53d7fda2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155520 Malicious code in gurs-manus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503d732fe252b9a1b5aec8e5d3f5fb2a21e43d50ed7a4eebf8ce74d9ac13bfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154880 Malicious code in fadila-poke145 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49bf126af0c54a6b3b3261c300180ef1055cb22095357cd75d730382471ab345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157493 Malicious code in kentung-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f6f4ef8c421992552716f2293adddc9291bce9998aeadfbb9091a9bee34a949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164512 Malicious code in prayoga-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13fa8d2568d9910a4069cb47e6796586513da25bb5bd84e6ab411256f5bd2ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168719 Malicious code in tealove-reborn42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 639174829aa84dfe065e42a7e68aea0c4169244e93b6c41b19eb51eca97e7442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150800 Malicious code in @miptaa02/kmifsaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 954a4ff45eed6c3bafe29ae401cd99fea3063e0edd4224d03bf7cfc4ce36672f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157633 Malicious code in keyla-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9460c8b135b4bfaaf1a37ee0c8bc7ef12be02fadb5f0a747fae08d803c7e4ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160709 Malicious code in modirai-igono-jiamugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259969f3f8784d759088120330cdd0d87c51ef3d20fe2757cc84a5be87158afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159668 Malicious code in mans-manapa-manfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd330223e3ee1f9292f4ca94d37ddd72323788d1d91c8adf01df893d39c4d9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164262 Malicious code in piluvaika-kaiu-nubuliv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7620dbbbae8c843bd1a049e76c1a62a65a9b17a1e457ade603ff27b63949e9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...