MAL-2025-155204 Malicious code in fitrok-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1fa211b3394c3f2e2c733a3412d88468bbc8bd746a2bbe06e69bdcefa69f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156901 Malicious code in irashi-se-1231 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6f95cca96bbb701b3cba444cb5d91493725883e05d572e42ca96b82c75900c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150800 Malicious code in @miptaa02/kmifsaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 954a4ff45eed6c3bafe29ae401cd99fea3063e0edd4224d03bf7cfc4ce36672f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153271 Malicious code in avminasah-aiagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1df1533be787b7c53551921f91be1b56cda17c762788bd06e4390831f9cd5b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150701 Malicious code in @miptaa02/gzaedy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0da0d9932a4a47f608d8908a69dcaa6a7823d5868c4217e8f607c36caa0eccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153086 Malicious code in avminah-fagias-fiafka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8303e5f7e244500eb4ba8f812a69af93210829a1ab3cfa62364f4c4618727696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154639 Malicious code in digo-kaimoi-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4daf305842103b869a97565fe7e34103437580e9d1bf86a7ed937a8cea9aed4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169555 Malicious code in uaragifa-maraneffu-safari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247d231bb9022452e0596e69c7181163ebabc0e70be735c116c37feea5d0856a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162113 Malicious code in nokirane-asaiggfaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a7a55a3f2040263be656d02dc5829d5e080ecdf3468e2ec72d9eb501b694bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166272 Malicious code in sunden-diak-nulamakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184f3f0c3bc1774c5b77c497339b6ffc140e51e6af1ba74b14091569144153b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166501 Malicious code in syahlan-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49824b97094baac83bcabbf234fd46ed1581e62f695257b619c66ac8ccca8c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162678 Malicious code in nokire-kilua84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6657b9d9e62e0e73b7874b53c4ebc771110038c78c085bba68d207962740b83f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157088 Malicious code in jimmy-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d30787c3d3baeb67d67a1eef0557b52ede683b96c40be81c05662e284fd4bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151160 Malicious code in aben-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85cae7da08bc1bd1c4a8252b462133ed3b8946b4ae9a4dfe124e8636f28b506b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152576 Malicious code in alvito-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80e85a42fa52629730bcdfa4537a368ed5d950f02312cd8fd149d63bf312f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156621 Malicious code in inufgi-gobagli-janiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85de84577b829bb66c561407af801f410f0a430451f02706fc1ca1a9f8d3aa75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167900 Malicious code in teagood-yakuna41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d268024033a4411885530e65823c6096a5820e78994e4a238b507556511cd05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152001 Malicious code in air-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79bdf3d9f200642ee404437512065b3b3f0b9fd4b39598105e7479312a2cb53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155720 Malicious code in hariyono-poke115 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe530039a912d404e0812371d55a571a1f4556601a8f6d1f7696f34452a075b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150405 Malicious code in @mipta19/ppr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c363307b39bb5a4e68e9227ccf8b7f7e2b4bd43a3ab16f0542610910fffe76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...