MAL-2025-166572 Malicious code in syahlan-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa430682414d195cb3285363f983e26db082e14cd8ac089423a1f76a98cd9533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161315 Malicious code in nabuf-ogauf-doiaoako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de4536c2ee5ffb9a92fdab6bb3ecb4f2745d7f23e55772db444fefde1b36bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158959 Malicious code in madan-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e11d8e983479f4d2e1502d9504e5e81f950c199df6b2859cc458dcec7e114d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165588 Malicious code in saku-ai-upuasio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b557395effd95651c09920798bb9f75bb9c519e6e989196d023cfabc09442a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150841 Malicious code in @miptaa02/mita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3465c8ef9cdc52b50ec0a0db23abcff5e4fe4c7bf1c88ff6508f4f0c827a22eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162718 Malicious code in nokire-kore30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b57e64b7cca74c27f51d0504b8f45f2a723ea7e81cca04c5753a1f119a6644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151068 Malicious code in abang-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c88dab92de0ffd3a4fa5fe8653f8320544ecc17fed8b9082a0b20683e25e65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170168 Malicious code in uragifa-afaoti-uto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcca8fcf5fa3719f2c6e79d0939060671d69a87d08559fcc50d59c93fc62ed35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165384 Malicious code in sabua-muhuyu-tadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30844e2d8b1d817380431fada0c1360c63a3517394c0c6b31347886ae199b91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157721 Malicious code in kuinsu-lki-kopumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a005d0a415b1ebb63c0ef02faaf6f7be5661fca43827df6a0243f778f1f023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166315 Malicious code in sunden-dibok-inumliuinuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436c7f656cb3f8da5e23d756a3e52ee0c08bed95a67fc50ee9ad24b833dff760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150305 Malicious code in @mipta1/xfsizzx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b8c695f6a037a9df1686a1b4a34f9ed5fef674ac8e8b98b5de400e4ad5a849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca6e10086154945d4dd324d1f0886ae780df842b263f8e9ea5d0755cc6444e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153462 Malicious code in avoah-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3055897e973a49e7cc6b5ae665d5a665721cf302fe2fb2bab2d0805a5b880c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160486 Malicious code in miracle-dibook-ikuk1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a839ed52803036cdfe870d7d413a5427d83061600dead9f4be0ec340286e2fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150461 Malicious code in @mipta19/wbzoslv1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9773f5d3d08cda76417cd00c72d39602b06d586625378491919ebba555ae3ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159501 Malicious code in manaf-asi-mantap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13929b932e39799e646ed5eb6e16bfc0c310151b5d76aaf53c816e9fa2e6bbb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166014 Malicious code in slamet-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d1e25a1df091a3f397e934b11e60fb97341af4ea648911a3f949413286ec54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160026 Malicious code in manuk-noatai-agamiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481dcfeb03060bdc9ceef035fc8487806d547953b988f46bf5a60db15062c721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156278 Malicious code in ilop-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c6dcdfb6eca964aa25bc3c6e550857a3f440caa10f1c86babb5c71ee75bd5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...