MAL-2025-165707 Malicious code in samehada-daazs-r7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b253f9a928348aa31100237ed838faa418ebd7e7ab9b2b55ee0b3cf80484a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150894 Malicious code in @miptaa02/ralsadzy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c5eb4eb3efbee5b3d679dfb557a941890a176a346257a20eaf07c531715fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159103 Malicious code in mahnud-nofty-muatigu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58da6a51503c77f50a6e3b854fe1d56a39e94363fedc6ee660d805376102fa00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164980 Malicious code in rival-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb300a19fd6c08b12540086169d2a69ec830bcf38e52e1a3cb8ef393ac97d91a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155715 Malicious code in hariyono-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38ac1dfb44b7448a358d3f8597e767c6836e9bf10539069821636a592a32023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157644 Malicious code in keyla-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1247c5e1c87aab9b2d6fcf511ea95909686752e606b04983c2d0c1f46c468c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170525 Malicious code in verify-ticul-biua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656151952a5426123f1a554585cf5d30ab963f712c3ab0eea3a32fa6d6452c33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166642 Malicious code in syahmuda-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd27d288298fa83aaa2f57a11e1d31b88d45fb7067249e0fef1f04475bba2439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154410 Malicious code in diago-kamuli-lukakimalaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335560da350540d5efe005c43fc28c850bf22742df0878d947a56d57c6a271d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152550 Malicious code in alvito-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4004f6b33d65747893ead7f6d916b4beb201375a7e87b87e00b66067a9d1b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153516 Malicious code in avomainah-fragis-oguoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7788275acc9f370f3dfda06e07ae7e1dbac2328419111c9716c1e255b4171056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164977 Malicious code in rival-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724d3c05c865b5ab3b5d9a8ffa6818b60f8746a4c5993026670a7e372348769c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168345 Malicious code in tealove-lady38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8fb9a62c7ecfe6c7a912dd33c9d187880a6ebb7acc7c8c908b21fe7c09c90c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154611 Malicious code in dian-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69300c0eefa0c3a3738d594fb69899f3b457a21447813f62b16a9b706e581d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167696 Malicious code in teagood-namakai41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685bcce37edf19526d41758a89e13f081a2ee6eede3f886d6e88594a8f22cdee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156885 Malicious code in irashi-21-are2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7289883b839312caa1d014a1a98d0dd2a601a9f6a1f5ada0e1d864e266de2108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153529 Malicious code in avomainah-fragoias-ofu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a916627623ca9ed2cc64ce56948ff844b525b7017e9f942b3d55662219bf2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161995 Malicious code in nasution-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a788a1b7242d13b4751134e2bf628cb53635063d49c01129c44994d413d565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153570 Malicious code in avomainah-frauhu-faqifda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ef9fe7ef91cea86a5a0ebe3eb7d3145e9ed7aa9708a40d1a3ba252035a7e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164308 Malicious code in pitra-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3a9159ec854555408a31f4ffccbb512542c9c2a5bcd274f7f8e6861e9b16d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...