MAL-2025-152398 Malicious code in alita-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c9519e0bb5761f668cff73dd36e1360e4d7ec9c90f9fe7f8e173bfcd1c86b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156834 Malicious code in iqbal-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6502b4511a3821a27988635831a97f1bfb9fab8bea5f3ddd294377b75dc86bd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168309 Malicious code in tealove-darknest50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc7d68dd97577a908e4ebfcfdde92aee58cdd0ebd77bd5fdc036de6980ff9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162678 Malicious code in nokire-kilua84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6657b9d9e62e0e73b7874b53c4ebc771110038c78c085bba68d207962740b83f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150510 Malicious code in @miptaa02/argg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41556b9adb09e4c5de3dae99695ee5b5af0d5cb464b7ff547cc41cb5ba23066c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151291 Malicious code in abiba-avin-aumaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6800820c55ac54432d4abbf65e5b2bf5d5597d0bec3ad553666998c41b2fc654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157693 Malicious code in kuinsnu-lki-kagdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 352616626aa6f888580aa624281c0de067f24d74d8284026cfa72fdc930ea9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153194 Malicious code in avminah-fagmas-diagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4048748e8efe59a979a87c64ce1d7139af754da60543efa64c1127a4cf111b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169788 Malicious code in uinsnu-lumi-knl1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c316770103844484f31f1bc72498a6123e41fd3fc0fa82cd26827894cdd8c123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162941 Malicious code in nokire-loklok83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c8d7b13449d3235f07bc6a9502fc3fb950f6eea60316b8e3d062c0cac25842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159075 Malicious code in mahnud-mau-nanayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f18172f94edb6e6ce48cf46754d1e5cd994fed5518b1f42c6614b629fcc74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153664 Malicious code in billa-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f106eba1591289b3e13d226bb88decc061214d569e84abc6fd5a67fc70cb1e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159982 Malicious code in mantu-nadas-gaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70ff9ff604f8be68a02e634ed6feeff77d4dfabe8bc1769b90c6636641df112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165567 Malicious code in sabuvauakli-nalabulaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55bb6dee3134755dbf9204c4fe12beb191744d2512af24139870860ba910415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162043 Malicious code in nasution-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e461540c13b0d87a0b5733de190a92b64ce8daab2cc679d7faa43602762c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156925 Malicious code in ita-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb21cd5054e42f91045e07435fafa2897c93304e4bd44f212ee351491f79aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 712ba60fbda9379ce4f6e99e41234e896c44e6ae084e4ac9490992784d7aa148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0af7c23560bc8a691feb399caa6d35a0097891ab0a33131015fcf09a7df67a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c169d35ca63680bbed0286c92c9fe2f379a7cede3924b9558395a9278d271da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-davu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f655d50d4fa7a1627aaea3f159a5bbdf9f3a5cce7a6b0f8e6e4b14286b32ac1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...