MAL-2025-165074 Malicious code in rival-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68687e6d618a103320be8791d6899ba7679b4e0505a3c43d2ac1fd657505266c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154654 Malicious code in digo-kamoi-ailasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a31e733914768112f858de4e5f11c3ccb33ac9f379aec557cfd45bc9bcfa4fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167989 Malicious code in teagood-yakuza31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d724cf12b09ca8c37bdf9ac26d47b18397706aa861a0ebd2184075116cc821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157634 Malicious code in keyla-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a2e12185d9d306eace309013c1cf22409440626aa57f525d1b04344e803e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154860 Malicious code in fadila-poke126 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ab8cabfb1f73170b54ac866938b25b53359e1a2557e5c92bd7b38d82435c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151807 Malicious code in aiboa-mioliupe-apuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744761fb3612e8fd116534c4ec1900f016c41de980ea6ed4d401dbf6bf79f046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153719 Malicious code in billa-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cc1e135a96d4a510ab33e37fbb93f6e6b49768acec5e54975dbc4f14c0bbfc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154362 Malicious code in diago-kamli-luaquak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6650b83e4ceac1bbf43f56a9d58e4c349c28136b84d10760f42c96b898cb708d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151139 Malicious code in abel-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ecafa8c20685f6709de0917dfb81c332c463b80c0614c197b2973275856876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164916 Malicious code in rita-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfeedc00999d06ce3d08e64939d775be9ae20bdd26790cde7b7ce3814e59ae9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160897 Malicious code in munir-n-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e3ab4d7b2a9cb8f5025fbc79e1c9d2658f22610b39e5397652d372ea7ddbd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154677 Malicious code in dioago-kamo-alauliaah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e7d156500d4e755c3fc0cbe6d0675be1e3aafe43fe5b78a35bdba598160107a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164081 Malicious code in pilau-akabalu-kluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c791c84fa025ddf4a5beea820ba8f32adcc781d7e8d839b38b62ec5858094637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152069 Malicious code in aji-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5ea071c45fa3f9091c59a1266bf6ffad2cc5e87724f9fbaf65cff230d4ef0a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159393 Malicious code in manadsi-scadador-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faea42f951a5a80fb67338b408e29b31d446e6da06da8ccf43d654d536004ae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165047 Malicious code in rival-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da03511e217c945a1d6b37423ed89efbe84e99d400f8bcbdc64854d246dec5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163910 Malicious code in nustar-msiuyu-muaivcascf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f873e47fb44195d300d9d57d40ec11bd1c0585ea06ee1ef43b3567ce520f946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151002 Malicious code in @miptaa02/wag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89f1390bb10883d2a54ddb7447f4e64b025aad9b4e390a08661046c57b56efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154470 Malicious code in diago-kuli-luviakmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cfbc6db10cb1a7bb6c15746ac7d14909f5a9cad89b322a1766f7c67aa89d356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150703 Malicious code in @miptaa02/gzaeody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f1402f626c0bcae362dfa0c60892dd227b80d82a4e5920b0edf7d50d7df6afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...