MAL-2025-165062 Malicious code in rival-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1440a6fa766aff512b1de981261b85c2f2b91fc24f5e6b785a73ba6a8a23b8d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161911 Malicious code in nasrul-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ab9795730d10c5f3d001a1098ee6a3d64fcf35c7834c9d9c5973bd384bd988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168691 Malicious code in tealove-reborn17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6ff434f744009b28bf40b5720d3d9482f47c2ef118a8b36619debe9a2016bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158686 Malicious code in lookingan-namakita72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31523ca95c873323b0179455ef2706b8aae125d802a09cb78a3b2db3234ca54d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163500 Malicious code in nokire-zabuza13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ea4f1da26389b0c788e000e7e5dd49b1a460dfb5c9e90cb5545ddc57c17890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir147 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cc225376397d38cc42811187cdb5754bfa954fee0ec345b394e70c7d5f2836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikun-miaiaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ee4159d333d7eb7efe8c4d889d14e4cd25364ddfbf1245f09ebaba6761eb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fglkd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d8ccb3e1fec89b8758eaf3afc66b7f6e62b8c7005806df6f970fb3615caeaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede2a4e9a8a4d46028e4b1febe2e39f82a85b7cb0b632e4231ff3587ed9e9653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155214 Malicious code in fitrok-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0456c78506ab724cc34bae275d7a64f2554950889395c3a87455a2b2b963200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150515 Malicious code in @miptaa02/asab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7989e323ed7d305c696073e15ea96e8fa17ead3fc92bf1d1780e83effbb09df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbin-nuyasffsgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157269932d74f7510fcbd52fc3892bc839b34553676510c495cfa00abc91d962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sau-naki-ups012uszzgxgfiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f066b85e05da1ed8eaa7071320e8c019a85bf483c0cdeb98536a340f1c5f3ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lost-diunst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8548ef93d75be2d84a8e77e6a1aa634c95e66a1eaac4178df0666d40c61f8d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibok-ikalabaliku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46745594518b0d6c9e44a6a2ca7ab9f462ff7c522aa52feb58941bdc8c9c8d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153929 Malicious code in bufpani-mau-naayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8fd7883394dd2fa5065403b80d724d948fed149496764fe6a83b349918ad8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154821 Malicious code in ewa-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fa9beafdadb532fbde76cf42217499872603cdcd43533a45e7906f4470e6ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150838 Malicious code in @miptaa02/miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ebadaf7b7c056fd6362e8d47f326184f098a22560e6f242bb0320e29073efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156286 Malicious code in ilop-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba2ff804f3f496d65b1caa2c1a28a694eb0e1b1dae290d182c26c00115aa9ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165303 Malicious code in sabua-muha-nyaiauanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a554d2b211ee04efeb84d46ddb9443bf6107eb2a8dcc37652578e623c24d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...