MAL-2025-164542 Malicious code in prayoga-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f71aa07ebec2840e3e6b3186dbdb797197f21954579fd0f9670356a96dd23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152000 Malicious code in air-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef93e5c787b88a98e35ebca4baada9b6788af46f21a64961273b8fb06deddb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168355 Malicious code in tealove-lady47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b87e8b36229ef32111a45918420630e49d580f9368d4bb6c7550a89b17fb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166154 Malicious code in suharta-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f353963339a5d8315e58c981cffe88bbd05dac10a75db90aac4888eaa45abff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152337 Malicious code in alita-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd65919f348ce56cd31ba18b6096b324104b47e53166044761843a219e7ebb0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165832 Malicious code in shilang-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d409573f8a7b3792e2bcf204c45a1ca2c67c266bad484400fca3923c24351dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158784 Malicious code in lookingan-namala7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212a455605ce7288b41a0322fc760fdfa0b40dd1d9f5f059ff301f81d25f004e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152033 Malicious code in air-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66477acc878f8cb0aacb5930d8546e740b8e19d9b8f6bf0a6c68edee514e57c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159557 Malicious code in manaf-yuki-nuatsy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add68c8ebbdd69776e43118631c8e7de83bd429ea51d27d9f2150a79d09c8aec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164891 Malicious code in rita-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f298812b8fd1eadca820804d56357ba5f739476373ead16c6d38de114027b861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163844 Malicious code in nudla-ofog-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3607a632ddf54b34ecb68eea529365a6cc715e2c8ad2ce45d6f2314cf1cc0fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156165 Malicious code in ilal-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7b110ba990d1a5fdc68c7c8466664e72972800a848e885c580ee8adfe53c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163160 Malicious code in nokire-nana10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a836a2533c19c15513f0dae7298e54b8bd28eb9108039a8a4bc66c08c71367ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161203 Malicious code in nabila-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78f7e60dfe39c434660c1e3e894519a13bea798cae7026768984639b9ef214bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164760 Malicious code in rinto-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e89a5f3483fc7791d933594c516e77a1e6fce3094b02ad7b2aa069883a7dcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160447 Malicious code in milraoa-miffojpa-muiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb63ba331021b08d0cc08dda412b1954375d563b05ea4f9e03e12b92c0427213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169522 Malicious code in uaragifa-afati-uruuo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018762b2912e82b0b260f333968eb35e8b0d360712e548beb4ca71400cdf23ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156093 Malicious code in ilal-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba0460f501669a542f11acba7b6a8ecb521b6cdb5b8822ae5ec68f9581be577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150862 Malicious code in @miptaa02/niya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d760cfcb539b26b12b821f718ef35dbdf6fd54d28f07323d26c99e8916cee644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152685 Malicious code in angin-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb874704e04d0e76ed014f46d6a64e3d5683ac42dbdb9bac217afd6c1eb7f99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...