MAL-2025-169639 Malicious code in ucok-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e3779e776750683efd6e3ea011170784c9caac513c9dc2b63e626269c68262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165831 Malicious code in shilang-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2b913a7f81c48974b1aa9075d8fc1a34d8a23b3a6d94102d9fc3a83117f1f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159667 Malicious code in mans-manapa-mana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfe8db28204bac08c8272e135e3649fd27ab42582ddead4a99f7a3206971bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164249 Malicious code in piluka-kamai-bicuibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfa5d177107ce1d9989311a23567d22414ad012e51b621b995a46af9f457e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165918 Malicious code in shilang-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8b8463d1e62de5b5aa515ad42550397b74b15d8843509d93174aff9b132141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158328 Malicious code in lookingan-konami65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d675ce992f27e68bc6f69a7db2973cf2778837eb9afca9e8dfabd3777c41972b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169658 Malicious code in ucok-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ba342dbe751d622137b3e16c4055d0f41a9bdc7d4bec97260c4d7555b62c14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159571 Malicious code in manapf-manuta-mantaap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf5997e21542bf349796f5ae2217210a3c9f7797de96cf8c4e1accba37b1f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159763 Malicious code in mansila-iala-maonlauai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854da5a9e878bf7fe0746a79860aa1ba3e9d1e5cd6c91035a2bcf210dcab29bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-yisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31068b15ebcde648c5be2ea9d780811c6b89dd1ab9b5c2d21b626c2721a0f41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166947 Malicious code in teagood-lokika79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426a11dacad6a95c5217663de94e61dad9f65fe60ee8878dd1e4c9033217a87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166087 Malicious code in slamet-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dec3d41fb514ac6ea8a9ac3123d65caad1b27d4f23658766d9c6430e4ef148b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-ja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628c20ddf09edd8170e8f4edbce3d28dbdca521c297d927c96e8dca6e6377225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/xsffhgffvd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49cf65279c9f1a9ed46e22da9a36191daba16a01a4245fe8bee4d56bb41704df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da4d75dde7b9ca5a8b415a97988b6e2a5ca6241e600ff2166b65f01be73c0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde445b0b549a21233663c2d7177651ab3b0231226c6c95aaa4fb4a82a5f5f23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ef01955e3e78ad3a34e9d32f88751272a44f127ca06440ee833dc0fc86c596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168003 Malicious code in teagood-yakuza45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e45bf5d57789a0aedbf56e944a35353e27386b8e6797d76b8db083b8fd41d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155296 Malicious code in gifa-ota-uofigapffuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d65df92dbdb14ffc3355380146b1b93ba86ac360c56a0ed5b9c92a81edc364d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152392 Malicious code in alita-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94717d8c87de1c545aa8e50a2873f6e837c4a143b31076d32d167b83aa22a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...