MAL-2025-157648 Malicious code in keyla-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c827ebfff9b2763377670a3ded0f1745e11a61da55a4cab827bb1830dbafe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157233 Malicious code in kamasada-buyada-asafafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0099b4eb0c86a251f5fbaed6953ed32b255eeeb915c775b612b0df02ab6639e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153805 Malicious code in bitha-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e54e20580c3f7a9cb385ba037ec5daa6339ac2414981819da936f39d4af950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149938 Malicious code in @mipta1/asarar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b0a963a4e6504bb71e5b53a299d38f4db61abb00134575ea384977e5ae8dce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166501 Malicious code in syahlan-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49824b97094baac83bcabbf234fd46ed1581e62f695257b619c66ac8ccca8c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169278 Malicious code in trevora-cir8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb0473a519da071054d9631383e12a0439e953ac5d51c85de37b8008119523a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce70af63f4d8e58c9a6c33b5db397385440509d3899c4310a844c111fcaa4008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155360 Malicious code in guras-adast-asda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7134107fee8a63bbee128c1c71f46b42e874a9bc1f23f56ada0b4633911d87f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168328 Malicious code in tealove-lady22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388042abf0a863cd8d64350943ad5e07ab6e948e8f87608b61a219aed0705b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167537 Malicious code in teagood-nalikoli128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb6a1731fede7bd9543a874f279cefcd68023422dcb0fc8a2c3639a4db664d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162755 Malicious code in nokire-korean5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b135c4ec292fe6301f46d78ece14fd2d1d16a6bafc2ccc173260322d606f9f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154639 Malicious code in digo-kaimoi-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4daf305842103b869a97565fe7e34103437580e9d1bf86a7ed937a8cea9aed4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163062 Malicious code in nokire-namiresan12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fccd53cff81980ae5e661740c91141c7259ec0246c8a9b136e170c600cb98318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151324 Malicious code in abih-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e922aa71046de5364016b60d7b48b9459ebc1cb1e7e6ef2d879163bd1a91f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165531 Malicious code in sabudaaopa-muyua-bafuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920ca95a111ee3bb58d786b819fac833a25c2529cf55ab599b22d7f2c3d2e87b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164205 Malicious code in pilka-luniu-kanukkuaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d9336296c4974308ae5d7fde2051b3fcdcff645e862488f19c11bbba7135f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169130 Malicious code in toyota-cir10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d572b2215b2a318951c7ae73ba218e4bd1cfc406e7be9e1bce1e6ab268f048d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167900 Malicious code in teagood-yakuna41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d268024033a4411885530e65823c6096a5820e78994e4a238b507556511cd05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manapf-manuta-mantaap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf5997e21542bf349796f5ae2217210a3c9f7797de96cf8c4e1accba37b1f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3fd76cd89f7d9a8d8f976d54df48e9eda182e9982f07d00afd563d077aee60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...