MAL-2025-164687 Malicious code in rino-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c44302aa36be938828e7fa43a32e9b356d85dac90e952bdd0450c8c20599377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166014 Malicious code in slamet-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d1e25a1df091a3f397e934b11e60fb97341af4ea648911a3f949413286ec54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161245 Malicious code in nabila-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9bbaff4345a7eb47521b9505ef629edc16fbe6ecb2d864969173909312793c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168705 Malicious code in tealove-reborn3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6227c99c5d3b0daa1a16b8d0d74198bf8e15581678d91492b3f7e58e7663dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151772 Malicious code in aciyua-idut-dafahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aaa220270cc1414bf0f3664d9f9030a8ea4882a025d00f3b32283eedf86bc73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160404 Malicious code in miftaiky-arrange-hard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15643be95611624d290c24a1219be3f6d0a0dbe3c9af4e4eb9c72cab61c46c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169871 Malicious code in uinsu-losiat-dilakbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25201bcf2da638ef9b3d1aa75613a8b197709cf896a277c86449370951f47ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152741 Malicious code in arif-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d54170cdf9f1027355a315ad3ea84b0ffd66d87a1591503a4145b3ef2374ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156954 Malicious code in ita-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e71bb2a880b3c3d7bf16972cd9885c105e7f205f886caa06902c1f8488c1eae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168534 Malicious code in tealove-nice8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3d540d19bd0af624cdfd92fe9e50ccb498e27d2dfb39996c40812a624e0b86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158882 Malicious code in lookingan-namalaka68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a76db3e400ba25c87c3c95fee9c1cb5a34f10196fef72509a5c4a1ef57e367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163994 Malicious code in parwo-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b08b891c883dbcc34c13bbb610ba08b71ae4a5468e17ed6b9422128b2a6401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166139 Malicious code in suharta-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7477c37b10e739a43b8e254e7a4df86f6f94697b57d604406b25de0c317a3fff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156491 Malicious code in infi-gafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e71f20347fcfef2050f4edafda83e7fa72f0bc256729ed47faad6a01e82a465c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168743 Malicious code in tealoveness18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5386219c203c7f978e01d05fe8dc6c9f28c6708a5519d81e1a95ca7688b9a176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169367 Malicious code in tusaaya-0-weaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2dfb63c7bb04d774084e4cdf016a0bab6a29431a4cdd64c7618802669ecf8c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169032 Malicious code in tehah-nutafday-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de503c77d210f606358d8366864e10a8c62fa824bfa58ade0d41da7320873af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158740 Malicious code in lookingan-namala3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15eea16f6ad91a63b2534420071c2c113cabc16b11b31a138f5eb0d1714d5eff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157415 Malicious code in kapafovgfino-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc17b9663cdfd7e01f241e546c72dfadaf9034ce6ef59f6918548ff2a12acbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150917 Malicious code in @miptaa02/rgmyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfaaafb41ddd6c1878d0060c38a5b5f87c7e1304f6466ececbbbf37f6d9d432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...