MAL-2025-158117 Malicious code in lina-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f8b862a864411acc17f67b84224608dfd9cb83cbb182b6906417e036b73557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164764 Malicious code in rinto-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be387ad1c527ada667208901de229cf5da760d4d1fd9515e85029e2ec0028616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157394 Malicious code in kamasada-nuysata-bunajadab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 677969423410f2dc6b5ecb26e07f0e1621cf853ad1118abab900e9ebb8ec32ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151688 Malicious code in aciaiaggu-fidaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a566ecba3bcd4af0653ac7ab1af9e11e471266ea234ea77885d494b13fd609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154424 Malicious code in diago-klop-kalosoaibak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4c8a1b5c63ec435b24fa71b20aa3aaf7b1854420518f5ae6c63013842355182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-boy38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2431834ba1b125f65a9e5f58044a2bac1b0853c281928b580df3b5fed75db5c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170012 Malicious code in uinsu-loti-banibm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d72037be51992f09a71127cd69458b109400cbc78dde395ed51830c97cb419d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167804 Malicious code in teagood-sukuna5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6340171cb024486b7fc124c8c4a67dfe950176b6cf042d4ee07c1a1abda84cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158990 Malicious code in madan-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b665f59c0407053f251d2128cb7078ce3b6b0fcd66cdfd41abefb12d6e19d00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163226 Malicious code in nokire-nana7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586fc8517a02bae3b446bd656eb11cbb578ea5f98b72cd339f0e25affefe41aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161603 Malicious code in nabuf-otoimban-igioa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7565e01d73e97f33ad57140c4bcf94ee61ae3f7b0862fd515135845f3bbceb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170360 Malicious code in verify-ayali-gaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e6c6839c05bd85e233e1077f342e2992eb56be5f6cddbf27659a2655fccb9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150423 Malicious code in @mipta19/s-ceh-1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 544340c3be061028ed2fa583aed91285cdc8ad608b7c3b4b6a128663fecacf27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164523 Malicious code in prayoga-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e63f0cbd1571bade6c32a766892eb6e05503d76696294fe176f99f2ab02860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161361 Malicious code in nabuf-oguuof-dausuhafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad295bf456cb17efc8daf9bad8c12328f42fef961e8f4ec0cbce7704aa48fa4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152093 Malicious code in aji-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2ab2be9789d244280d90547c5091d50c040b67e0cfa2dbd68818eea746a835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160819 Malicious code in muklis-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03aa6f97743cc3c60b21217f051d917f7198094c9e1cb3bd677c679eefa4e14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b0590d8824d24db9403724eaf47361fc83483bc4ba7ab0b34e0a55668a487b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166440 Malicious code in sunderlan-udk-vaukuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3c6070325c17b104f35ca540ffb2399e2c2e0129f0de85f18671758ea66ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147752 Malicious code in secure-amethyst-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541ba38431b3780400e41d81cb7535fbf96c476433a77d61021d97bc81b7b709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...