MAL-2025-167912 Malicious code in teagood-yakuna52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1563c22cde71866ca011d1b04744804fb551466fc492902615ae73c3210fc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165083 Malicious code in rival-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8239d8a053931d5e47b1676293af6e2485b3a91e716d587c0045af9909810d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161129 Malicious code in mutdaufs-marimasa-nutt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8b6f229244dee464d17f2b1a9f4a09d7d732ed69f14fe6e0e70f87ed5d972e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155992 Malicious code in icha-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c5fb0d8c3972c8ab5bb30992e7b9f5b53332bb4bd608841c6469ffe4ac06f66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155953 Malicious code in ican-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f5189b1fae7ef6131f99541abbefc25f48b15ae77e546343ad000da61a093a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157228 Malicious code in jurss-zsa-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f159ab5bded9a2970ede5336f9b2b4e2054c4f5806fcf2ffae8fc1c1d9faefc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166440 Malicious code in sunderlan-udk-vaukuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3c6070325c17b104f35ca540ffb2399e2c2e0129f0de85f18671758ea66ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159697 Malicious code in mans-manapa-risk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875c2f3aba003501d3051a30848205210ad918b86f9edc18a5d1a67761956f0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169634 Malicious code in ucok-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929f53cb0023b24915109bda79e7be4b4d66db6aceedc566578fa15be830841b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164496 Malicious code in polymeria-mayani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38da0d094bdddea49ed0951c0a89875d9d5d93a2a957f96a0ed9b930614209b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163338 Malicious code in nokire-rara49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6ae9cd7862e47e53f487f0d0998742134ebd361039f7e45599a4b71b5b2fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156380 Malicious code in inal-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb96a74122c8963e5bc2ff354e6f07efb1f826fe9d7b3e06fbd9d2cf50c96732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158091 Malicious code in lina-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ebba718ed81437df59431170e296542dd4cc8bd848fc7a9d94003a6668c5ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156352 Malicious code in inagi-vumafe-na (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1d69f8a3579c513ed2fbf4a3a889d921523504cfb81bdcdbe1179a42c1bd63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161246 Malicious code in nabila-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97af868fbbd59491db9974516a65258272b7dd7ead51e72b4ce5435a402e5a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170374 Malicious code in verify-ayca-amilsuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac91ae03443ba40984dbee6011036d4789e988a68b45bc8018ea980b7a199dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162897 Malicious code in nokire-loklok43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d64b75968bf32492fb9594af5d32be9471f0ffed9c953f6ba7ac7255097437a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150496 Malicious code in @miptaa02/ajyob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395f43b64c7eda77a27caadbb253d9b5cc5c78a9807b14c8ddd81efc18f19ad7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154808 Malicious code in ewa-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86f4b47cd1b7478c4890699cd71ebfb179aa350e7c44c430828991b0bb36a94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164385 Malicious code in polil-akilamu-lkiuni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 379b4f60e6b0ff08ebcf38b4591e18689916320aaf03e901c0cb53b803d5841d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...