MAL-2025-168643 Malicious code in tealove-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60141c12d908e6a5445df124a6b5476ded26d4e23edb744786a30e5db874d02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153882 Malicious code in bitha-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b469e308ac958cf876b5bde724a4d670809e50eab3da1ade1ed19fca6c31a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158028 Malicious code in layla-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b80335c8b1b812a2984f33762b423500fa3afc57abf572e064874171e94b27e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150566 Malicious code in @miptaa02/dffg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8e0e66de984f3d7be61267b681cc1b54056ef14bcb6e6a36b49e025c4ef541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151041 Malicious code in @miptaa02/xdz2rdtj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483eba19755acc71733826a3cc7f3120553f4ac7fd6d564fb830971fa4edcba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155003 Malicious code in fatidra-faradda-nuydua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa3c1c1536ba40bd111240397df6a2cc9bf82f3263adda888896f3941ccbe7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161116 Malicious code in mutdaufs-marima-bustyasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9283e2eba0d23a56e7ab32b39366a763eaac78f093c69f35f14a860794eb721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169613 Malicious code in uarug-miafi-suatafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d088ddb8b2df103b40065871f8340ecc4676b15fe2b6d02fa00618a1799545d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155366 Malicious code in guras-asia-bang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a30634e2dd308ce521fefbe1c634d5e98dcacf263f42708644ee625c724a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165705 Malicious code in salabunuli-nalikuia-lusbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf3d400f0282226c1bbff272dfc432cebce78001667e8288d02624fcb39b768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156400 Malicious code in inal-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2364bb0cf3345eda4d21f886f6d94f6d836f1778dc9385ecef31b7496d953a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152395 Malicious code in alita-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1664be0aae009320107f356a6c3558ae4efe03b3996be68d679e130533348577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155626 Malicious code in hafiz-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94b05fa5627a633d0a138b2596beb212ca92400f60478962708f6aa0a52f435a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165774 Malicious code in sau-naki-iyuup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ca3d493f461520e274e6c284fc7fd325bc90d31cd5669ce6d489bcd8e890fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154813 Malicious code in ewa-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7600881f01c6bb98a8067704d89dccd3ff1345b4ad1b368a247e31cdc103e164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166268 Malicious code in sunden-diak-nulamakuiabin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42c23dc86c0b07f52554812e151279d507afeada1ea188b4d1c03040eb14bb65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164469 Malicious code in polymera-manuyat-butayagiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be170f467beda041659412014b9c4b510d6dd143184dc4bd08ff04a04ec620d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163995 Malicious code in parwo-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3fa560c44fd78ab2c53d6ef181f03f595bcadfd5f38fd903fc1949b548b8096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152291 Malicious code in alfiansyah-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f77f11144437337a823c98ecfc2d36e87c497a6cbbdf08fb04f5f3594015f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162480 Malicious code in nokire-asaka11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e686f5546560b72fc3ce3cbf63db272f32fe061c56e8a676224ab373813e4a35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...