MAL-2025-155641 Malicious code in hafiz-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440b0f33d3e2903f79608b4d26a07d0bc2bd5d2a37f450a1364ff527d7f880fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166520 Malicious code in syahlan-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff47782737529fb909978601b27a04a5acecdf733a31fd7a689b8fcd1877a118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156166 Malicious code in ilal-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90524f1a7811b86e041e73395f7d844803f1834e21080f379f9392b2c83a4434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167281 Malicious code in teagood-nakamala19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0be0ce3d261c583e0120c8f6f6cbf5022b47467c7ead27355f3be4863a78c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157146 Malicious code in jurss-aspsszas-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908d474b7790cd2dee5c7171440df3c21f20d996690aaad4fba1b94d94df494e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150862 Malicious code in @miptaa02/niya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d760cfcb539b26b12b821f718ef35dbdf6fd54d28f07323d26c99e8916cee644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161681 Malicious code in nabuf-otomabin-nuyasfgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f023faf4925d225e4706e23fc53e49be9fe3c6c1ee23e9acf8a999009da587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169538 Malicious code in uaragifa-ma-sayuauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb02a9e1fe44450be8ea54d22d37b5585b48569b8a4fb083e69dd16fc987946f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166633 Malicious code in syahmuda-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716c2745b44e753d874ad0b497816f455a5b1a9df758009388cc989bb8bccbbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160536 Malicious code in miracle-doki-unisakoiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5fce1e544968ab3f240be582f5ad7432d98f329606f1802c953917009b4434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160573 Malicious code in modira-fuhopia-janadurai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db167abcf6bfcc39c9a33fa02b1f2cb32dea1c0633898dcf9871e2468e3fab3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152337 Malicious code in alita-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd65919f348ce56cd31ba18b6096b324104b47e53166044761843a219e7ebb0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152653 Malicious code in andriani-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d993b8563e79fd7546423d26ea639c9f4178eda8d1d88bea9742a765045c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163294 Malicious code in nokire-rara1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66196e0902373b1e1bfca86027d3a61efae6d261af183982cba60d182297c213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154862 Malicious code in fadila-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5821df3cbc484f496c6b4e3c797d3c8c9fdbbf00c315cf5f4209320bbc9d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160447 Malicious code in milraoa-miffojpa-muiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb63ba331021b08d0cc08dda412b1954375d563b05ea4f9e03e12b92c0427213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156165 Malicious code in ilal-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7b110ba990d1a5fdc68c7c8466664e72972800a848e885c580ee8adfe53c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161203 Malicious code in nabila-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78f7e60dfe39c434660c1e3e894519a13bea798cae7026768984639b9ef214bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164627 Malicious code in ramadan-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04e4e32b3fb031cba4f49e4de8afc8b5cabc6cb56a2c13e28637306dd049e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158784 Malicious code in lookingan-namala7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212a455605ce7288b41a0322fc760fdfa0b40dd1d9f5f059ff301f81d25f004e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...