MAL-2025-155395 Malicious code in guras-kaaryo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e9205cdf3ce9731f0fcf43b8e62876d215661640406da20e14c8c8eb13b3f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165049 Malicious code in rival-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5414f6a522216674514f0c2fd096ef92b90a435f8e843838e147d5c4cb41b9b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163361 Malicious code in nokire-rara7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd100854bdabd34b1c80ed9ad88d17a31c3f64342551ff7fe49257ed6d97805b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160192 Malicious code in masioaluan-ofa-batovuila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d808f5321788f2a93bd95f6c904cbf70da636b7a070a2d81baa788ec6ca8d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154960 Malicious code in fadila-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ddf2562c5f7b00f0bfb540192c684d668aeb28b236b35ba7084c6272bd33b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154976 Malicious code in fadila-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6648bd949007d0c9200256ce28b380fb894c17b4cdc4202f2fb2bc07ecceb792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169648 Malicious code in ucok-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 686b867f043b96d87081bf04b988ce85c9972375fa1c877b1a5ac9a792818625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167234 Malicious code in teagood-nakama67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd7c756ddb845aaa5571e7dfb95673157f3ee3e04a84025306d6bb54f5276a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169227 Malicious code in trevora-cir33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4c14babe25b097d420c9c1e2dd4d9403bc800a6954517a82dccbc635f666fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162326 Malicious code in nokire-arhani16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f0d7d2b32ffdc85aa3721d67e4cae0da11e5e79a57c714dbd21509b07ec9172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163922 Malicious code in nutr-madsadn-syfahmuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be203e35669c5ff0eb5f8ef5c230a4f8515d1367f9b11910a7adf7e2546262dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163610 Malicious code in nokire-zenitsu23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac7d77525319f1910fa405a63ba21a9fac133b3fe562d1a69723932be6db77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154594 Malicious code in dian-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32fb57086ab3dbbc2fc5ef316a9b150e85845cd02f18d079d2cba975bfd377c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150938 Malicious code in @miptaa02/saviontra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdd43c9979affa1c32e67599248be342a024d0bdab6c35a954d50573c11390ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d631b6b9e1ec4ed3dee8aac6a0e78b832b7df5bcb93af6a08219592113a7fa88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dik-vam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e8545149de8189bbe47820357501eaf5e0c33769b58a77a45dc94f3516bade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-ls-dingkos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ade020bafc0b78401286f6742385096d76dd619fe0cd0cfcad50087aafb05b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259a0ddc49f8d8b4a466a3f1e52b3067c3a107b1db67e548351caa308c959b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169656 Malicious code in ucok-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e488c64c435788791d3fb7cd03a40f11f1cc4238eb46550883cb43e76d4e3a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152920 Malicious code in astia-al1f-daronoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c214d8e14fd89e62247b8ce6b14c19be06da58d73700d9a72b43c74b8df73cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...