MAL-2025-152576 Malicious code in alvito-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80e85a42fa52629730bcdfa4537a368ed5d950f02312cd8fd149d63bf312f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162973 Malicious code in nokire-nakala21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b913bbbf73df6e7a6dc3abb81a9fa12d7019de99b1ed289e355e6b74a8fa194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168148 Malicious code in tealove-boy40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6fa442afe4f92efa8234806c974f44e202bdb9aad2d5cbee77173b55d6e0c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166828 Malicious code in teagood-cuekin61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 626815d3e43296ffb3bdb3e7eb7a18856c77eddc7bae804d06ec7cb00ea7f0f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164525 Malicious code in prayoga-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defdced9386d2c9b85d911ded727103cee918b553c45500871f879d06e2c0617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150468 Malicious code in @mipta19/wjgub1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501ba5bc14e92d50b7173cf540cb1de0bd0db3fbd8a5466e1f26ca10bf16d3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155274 Malicious code in gibaufa-otatu-umita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fb54f4290c45304c628ba010de44cd8a9177815d1db76e9d6eef299b05bd5b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169538 Malicious code in uaragifa-ma-sayuauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb02a9e1fe44450be8ea54d22d37b5585b48569b8a4fb083e69dd16fc987946f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169142 Malicious code in toyota-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342a70b2ff62daef8cc4203b4b1d1bbeeab56cbbd05427d8a27f277df4ac0e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169557 Malicious code in uaragifa-maranefufu-safarai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f7eb5391bd412b4177c7a9c1203252f63638b6b317927b6779ccfdc7678dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154700 Malicious code in dioalgo-kil-akiauk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c697415026237d0717e82833b15f643df89a070485f1cf7588b317b94cf639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155982 Malicious code in ican-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72dc7367e8279ce2f8f6150cd6fef82903b98343df9936a52adcd563e46a717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150187 Malicious code in @mipta1/readx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22756534a87d21d4f8f0ce3ed99c7f0dccc3cc54ae2dbc6d0a5e3da4c795b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157315 Malicious code in kamasada-nusata-buajidiba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d7dc60579edb9c83d6231fe273f27e7dee1ec98be6eb704ff7d7330855c656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157633 Malicious code in keyla-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9460c8b135b4bfaaf1a37ee0c8bc7ef12be02fadb5f0a747fae08d803c7e4ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154036 Malicious code in cinta-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d891fc1e5e24c860f0ae7b2af2e8a678528160a01e6f730c441d33e1fd96010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162523 Malicious code in nokire-genji35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1363888fb58547787405052e91c331388edf66ae0af41099ccdb2150df312f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168442 Malicious code in tealove-nanami14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c706a8ea1c6ce2934d268a1949068c7bf07182bd3c0fd3427e17eb2f4168339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156550 Malicious code in intan-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3189d13ad2bfd58d57dd094e5663c6fbd6c51d565cc8821b30c493e32de127b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165906 Malicious code in shilang-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1876100ab7cf7fa2387e98b7b85f3642ee0387ffa6649e4ebb16706082fcef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...