MAL-2025-165001 Malicious code in rival-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ebb3138f762727c329d7a3706710df989518355008f80f3c8038432bfd12d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163909 Malicious code in nustar-miuyu-syfahdmuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1818bb7246bb3c672fbda60293e7df1ad7e3b67d6d5764f64b0104814b2e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166201 Malicious code in suharta-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff36973e96994c12268e015cd78fb2f36a2178254afb34d6318384914167817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156076 Malicious code in icha-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9047f69afb543b3f7d03de80db790532db9cbfd1ca1009d43c2d42261f4fe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155711 Malicious code in hariyono-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e760ad24de9a26b83b1a5321f63a2c107a89732c18969b00864281bdde3581c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163664 Malicious code in nudalea-fofiari-agomoidoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2600dabb9401bcea0a5af264031af8556bebf8e1cc28bf37e0012ea67939ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163146 Malicious code in nokire-namiresan89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73c2ce85d9ce9f0aa807bdaba4c71e03e1fa9fcc61a5abd0cec68de4251fbfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165968 Malicious code in siregar-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211e3f9177a063a13c9de7e9f75f71b92c61d28264e4f5a669333bd6fbf4489b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150875 Malicious code in @miptaa02/nyas3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005a5c5e95c96953d484a8edad65a64a02aca94c163b5a57821e473a7876d427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156347 Malicious code in inagi-vumaf-nagafufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c1f7902a10e69d24b83fb4ce602cc447ffaa02e6d3b3d53359144bbb06b645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161484 Malicious code in nabuf-otimon-g0gnfai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac07e1df088c57c8a5e1c9d91d975f00927b937cd419c19cb16d05a416a95cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159184 Malicious code in makan-aigoa-iaduam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a7284edb0cfeef8fd5fae9792e8bb9f700245e007a05cc25287f0757115e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165104 Malicious code in riyanto-120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f44b2fe18154072f57fb80443e99c12e770f1ed828577bbed49381c73fc44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152926 Malicious code in astia-al1of-darokoiaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e534cdc31f38c5a5e7a9d58ea2eb4638e03b42c94818be9b451b1de2a7727a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165079 Malicious code in rival-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbacb8eccc95e35791118f6b4145807e3a6deaa6e68e78a23431c91e4b6fe6e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163741 Malicious code in nudela-agakaff-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd04790dd18f514a186d8bfa774e39ce04065a63bde8642cf2adc8730003350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154330 Malicious code in dia-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86e1056c147236e6725d859239f714bc85003df1f9a63f9cb8bb1a4eedcebe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-zenobia-sirius-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f5376b0c0e0a0ff01dd8e01c3bab10543dba3f4dce47a2a2aa1524795a648b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-terser-webpack-plugin-achernar-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1e454a3b4f4d5c66dba0bfc9697d1034ffa85bf2cdc3a171bffaa936b9ac57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-fetch-event-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1ce1e12bcc903510a892579c99f0def360b8da6d761f716adfb0b174868f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...