MAL-2025-156482 Malicious code in inal-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d907ad2025f6d6a5a541ee5a81a914100203b18edb1d09def47e359b6ed9102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168017 Malicious code in teagood-yakuza58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7efa1d8344c12a6b46eedcae2ddad3faf3269841561cbd1614a8fd69b161df07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156580 Malicious code in intan-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838d05bd2206a1db10ddff3753181f982e5b896026fd487e0da153d4ec23b088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157597 Malicious code in keyla-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3765a44482cd50ae2101f98f3c2e7083faa151ab8f40ab3e8f69d33041f193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155183 Malicious code in fitrok-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 509837c3dded77f43f81ebc172b4a370f5c3ff0f4cb1b98854ec02e10f9d26ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150253 Malicious code in @mipta1/srsays (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3915aadbb5f076b8b336a2ee33924faf1de2d7fd144d7a77827d69275acf8342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166634 Malicious code in syahmuda-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1041c7befa8b306323aa14aeb658221bc569b8de600db556163397d5bd54a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159835 Malicious code in mansila-tiala-mdfghlni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aee83000b7925663f826641c29981b45adfb050fe05f25fa17ad2b75c0eedb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151030 Malicious code in @miptaa02/wia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a80c8c9c7bd277a68203abae05bccbab756bbc07ed1a127fad94392c0c290a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152824 Malicious code in aril-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9564034ec338ba77067988390a4a5d3872ddb6836681dc84fca6cc6b2504cc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165003 Malicious code in rival-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63134ba9e3325a7055899f2eeccbe34daf73bff1bb3963d474c9b3fc1fda5fe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153364 Malicious code in avminh-afais-fb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71df789d004c9c74da90099cf83d321be0c02cabeeea0066edae8cdbac2d3222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161866 Malicious code in namase-namuda-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0584ae57512433fc611c1b26165c4c076d594c25ad97f8e011bee771e03fa31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150957 Malicious code in @miptaa02/sxhdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4372c71d31910339b01b69cc668f7930ca0a4b97334dd2365fffd36d3ca904d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154636 Malicious code in dian-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ee0742dc652f93735573498a9ddf8b9a7cda44ef6bf8ca9005833d1b4e7bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165972 Malicious code in siregar-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3573405ec2d2dc06b424ce2b6c03ae0e8919cc42228f364efcdea2f011db1f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165857 Malicious code in shilang-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573a58e8d1c35ea5d5830b05e62782fc4c7dfcdb3d1f0c86c8fb2c178c09c02b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169779 Malicious code in uinsnu-lotiupmi-kilabarm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9672f66998edccdd74c18e88b3ff246f1309abe42a1ec1f8072ebb9a90ee014a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-exec-umbriel-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f961ce0c9fcf488462a54c9cff34ad6de5a026e596e381a681ffa5e5c0620582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-mui-procyon-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1248ced1e49a7b5b8fd9186de24b120fdbed1c2aa66d43c5beaab197ec4d1247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...