MAL-2025-164060 Malicious code in parwo-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21cc742b65d012d27fe08f6409e1e44dea542902ad2adf9947f58e40094a3af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153001 Malicious code in avah-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ddec72191bdb29c097e12de95624b25ac4c4db304b11fa6e127dd6ded4241c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167461 Malicious code in teagood-nalikami6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b85508853f46b7213a9d8f49ef03e2195fd47eac6c9d0317f7effb4292dec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155532 Malicious code in gurs-mipop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dadcdc0f785809d8fa57f81115bf1a5de8869c503d9c980a8dd4c3cd785779e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150673 Malicious code in @miptaa02/fsis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4aff69e1c56951a72fe5de2d3bc673d79b799eab582f6aab2a5fe3342d0ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155925 Malicious code in ican-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e3016bc6c2a26acf6c94ff385cc0549911e3c2267a95fcf6fc78afee8a9995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151002 Malicious code in @miptaa02/wag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89f1390bb10883d2a54ddb7447f4e64b025aad9b4e390a08661046c57b56efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169331 Malicious code in trevora-mmisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbfbd762193cd78a843e2c7de4d93038eb8c8aaef0201057e10ed9585459bbd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170393 Malicious code in verify-ayica-amalaunioama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175dff4d5b66b85e5a703797bd27f6f15ac67a53d59b31774ae23fd217c8d87b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162724 Malicious code in nokire-kore36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d505caea2abda0db6591f1733c76f2dadd4a34fc21777364beabbf864936713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154715 Malicious code in dioalgo-kilp-akiauk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 055c5148234afdcc719ca2a4ff0c77a875535a6c5589405d05f59a7cbc4c4983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161291 Malicious code in nabila-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42504cabe925b2f85e0eda06e89a03349bcc3edd0c318b21d8f03ba55e38502a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152376 Malicious code in alita-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d8cb415430db290e64da4f9adbac0436841ede314f7e208e51b1921fe99330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157455 Malicious code in kapvino-saf-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b426931f3c2e13b977e6f9c04f187630d4c9290c938ce3e70e822c4f8dbf3c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170437 Malicious code in verify-tac-malasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e8d5a87ba7adafdd15a2f5abf2c38e8d385bef18decf14c2a3fcda7fef759e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159158 Malicious code in makaian-aniga-ua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c7230ac43ff7cff5466f4f0eb0165880c1fcd12545deed440641913bce86437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169724 Malicious code in uinsnu-loiupomi-kilabarm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d1b9c22c781a72b2bb991cb5bd77812d4d1089e59f847c78dcc79e4a6d81a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162954 Malicious code in nokire-loklok95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f5d68df0721388f8e3054de3b51e805440682ce543447d6cd858f0b4f0ee49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163840 Malicious code in nudela-rahfeg-nahaahgsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cd5af55fdf52b2bd380997b16d58252aa5580da0e482a8a007975e56a0c1049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150007 Malicious code in @mipta1/ersassdta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834cb54555bb87589cd722bc7c0f61c27fd7885419722ba127c0eaf12313e005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...