MAL-2025-156449 Malicious code in inal-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f20eca48cb9196eb52a80099e89b65173e1a3e584643af7fb9c332d785a725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166432 Malicious code in sunderlan-udk-vai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e418ac5f07663722375aa676f3ac9523654fcfcdf7edb473d96825165bdd9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169483 Malicious code in uaragia-mudai-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 756402639ddaa5f0eb2fe282c6ca865575926ed9b2d8ebae64c9e48778b78f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168697 Malicious code in tealove-reborn22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b236ab2a6ce17fe08c9a52098e099bb81af95fb5189375da5e60f22a84e7a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163034 Malicious code in nokire-nakala78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dfcd60e840980838c1df300f5dea1cd20a26638b8254c96910a1e7145c4d5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165145 Malicious code in riyanto-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aaeafb108fd56bbe08d4a41b51af9ed757c5843abf63d14728921a7a536e5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160367 Malicious code in messi-tuedda-tura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e08e2a0856b95723a2b48f9ca83401da47ffd519da8ac0359271c36bec770d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159546 Malicious code in manaf-yuakdi-nurtsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f284e7f70bba7f11c21e56448c24b794877eac336997f50d0f8b4d198ec1a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161912 Malicious code in nasrul-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb729461bb6f951428f93e2f15f6bf658b1b5363309017f60a85109b92b2ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169248 Malicious code in trevora-cir52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f4e35430dce4416810f2d9d601fabe8b74f956a85ff5cad27b5b92b784760f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158224 Malicious code in lintang-tea62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 241e19f1dc4e758eb43edfa4a637f745ac3b33441f12e7717c080699916a1b47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167729 Malicious code in teagood-namakai71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d054dc6a1bc4540f5641dbc88c59c17d3181bf1c2c989204f6211163db77e2a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152345 Malicious code in alita-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867b63ad31012beb59d5777c9c5d23f8bc649e3cc0f627c8af35b3a0d494909a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159329 Malicious code in manadi-scaisor-dr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c1dc4333a7a65c06b1ff1644372e52571da3d49936e75d56ea647019c1b1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154114 Malicious code in cinta-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c61ecc41ce209f6f2be2e0780498ff360ac97408fc1c374f2d48ec0c3da2d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156432 Malicious code in inal-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a614922b86b6aa2c1aa09253d38195bb3a61875b3b6c9e60873e0b54c705297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152723 Malicious code in arif-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d1cae547fcf35766c7620a62ae7b7dfbfd9ef6e03fe78d9a8ed5068a6aef9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153154 Malicious code in avminah-fagis-gfyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76168df0cbe6c5efd9044c68e1eee84b6af0cfc5c7b0fe38a8e821e301b2fd3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150378 Malicious code in @mipta19/gupuhsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5358c757adf9ffaf717bb2b42db05144986181c27e2d690481110dc2c789614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158992 Malicious code in madan-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f973dec5c14b4f1d0f909445396b6fba46de816b4277c4734e968c6db7f8841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...