MAL-2025-164980 Malicious code in rival-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb300a19fd6c08b12540086169d2a69ec830bcf38e52e1a3cb8ef393ac97d91a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162586 Malicious code in nokire-genji92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8f97ab58c253b61d471cd283d625a986c95e2b6e1d7127e308c41526fecb2a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169453 Malicious code in uafagru-musafie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de838e9eef4765d95276dc882bb61056ba1dbf4670790d8a77a55e2090007ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152288 Malicious code in alfiansyah-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c5d3d3061b27e3d23820975fd4d7a80de8e122e5c03d3533726169445666b9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155649 Malicious code in hafiz-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1641a4b635441b57b08341c58c0481814c2fe03f5ce7e4cd2ecbc37a7ca2f3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158277 Malicious code in lookingan-konami19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a559a75fef06b151d818366c6600d27548c8fd8d3473a5556658bba77c6612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164658 Malicious code in rino-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b702144d58be44763d202667af0e031b64e1829ce1716ae0e1c2158d6af16e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150703 Malicious code in @miptaa02/gzaeody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f1402f626c0bcae362dfa0c60892dd227b80d82a4e5920b0edf7d50d7df6afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157532 Malicious code in kentung-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d867f9b185d6081d16c49eac730df8c94e0f87c7f7b21327666af737f7571160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162954 Malicious code in nokire-loklok95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f5d68df0721388f8e3054de3b51e805440682ce543447d6cd858f0b4f0ee49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153397 Malicious code in avminh-afgais-fafdosafiafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4fe2aace4c5e498133aed91e955a7f9b59c22179540f59ed1681556fb7983a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164425 Malicious code in polymedr-mindatas-buipenaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 098d8b15a49fe16b9f696a04ce0f99165d36b9d23c5753abab8acbed65fd7daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afaifas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba559dd2480fbf1f8f0c1d76a849af683a171568ab607eb799ec87083b3a4a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02124bbd39eea62b28fffabafc2dd768062d89aefc37db8d2ab314ff243307b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17190d07a37bae36fadd3ce0a2ded6d375f2e1098b4c92109ee12e81215e01ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carssa-sadad-sasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5199c7258f1f683b37672eacb394b1843af362be19b910568fc6cf96d1a8e5bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63dd39901709edfea0b4786328740c8023ada1f806cce68c012b015017ecbb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ecb40f83ace977e34cfa440d872e9bee2802358c93922d914dc54d37d4df861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0309489a63d3b148a17702ce1e896e6b03055c03af85c3b37b47e5f214f1a01f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopna-mobile-aramaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae0c2d024057eb5fed288da1bc7af8d3a7271cd4be8c7b6c7def065d9b5dd56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...