MAL-2025-169662 Malicious code in ucok-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9875f8d13fc18b432795e62022dc4ada5f62d4c4605195adbf4a176c09a679a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162240 Malicious code in nokire-akaza29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d96c6bd2ad3bb34912607a901617b7f54c79b499f77b4140baaf71cd555b997c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166654 Malicious code in syahmuda-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a709835044b936373d744513d83d964dde14a3b08eb23e0c26ab5a92eeb39b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158187 Malicious code in lintang-tea29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ce2ae5d0c2b2f9e8fba4f019a75b1033c7d270be78e564d138141308304954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156124 Malicious code in ilal-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22b20da043cb8b2cd22696336a5d04253be6300080e943db0e410caf6cf1ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153043 Malicious code in avminah-affaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1399cc1b7d667a8256f487994dab4c6fbc526d2af25e357cfdd3a45124f93cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152546 Malicious code in alvito-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0072c638a4dd3d63be726b44e6756d70900f4e82d028ee7ad0988374128eebd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156897 Malicious code in irashi-aras-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e56570f254d1c253d1136e60354ca2b65914c9da018ed6aa4a07a25cefc19a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159428 Malicious code in manadsi-sfaddia-maraida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1919f73624e6c385975356c53b20b1fe426a44239491ae82c5b2b95a22fc4f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161152 Malicious code in mutiasfaft-msiuyu-masdta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a575f13a16d125409d7730da0cceb5b09261136a82e5a8c551a7314e779c46c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150437 Malicious code in @mipta19/sdd-d1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf0772db39c1363ad20ec4e27ddb0f27501d136514a0b4377db604201f24674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157138 Malicious code in jurss-asdf-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e5a4755d374a0f996b159849e7bd714851327bd914bf35ddd0420eb3cba1c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162760 Malicious code in nokire-lokcek1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a557af184c6e2791389c5f54e144a6f1cdc661d6866cc608f9bb6997f82ad27d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155080 Malicious code in fini-savion-tr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17420b9d2d46d73aadcaed062a9dc40f3294cd5c4bf045b39d06471a46cb3cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168427 Malicious code in tealove-nameka43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f07dab3a7eeb65ad607503c3fad331137a93b73dff62c86835e57ea1a6f42485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155995 Malicious code in icha-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc53eeb3541bbe01e69960ae41bd263b3387cdf407a945b51ac80007216f1cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158639 Malicious code in lookingan-namakita3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8468067958e30f4ae2f48b4155d3129ccad9e04931fa47d762fee0581ea58e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144479 Malicious code in live-magenta-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe5e4859cbe0e06da5cd17cb01242c79c3d6decd5e419cd68d0b254df9cdcd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical-blush-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4788edf05fd7a84c1d50968e29cb519dd07ef3c4707662ff8b3ca19a6d3ee6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140999 Malicious code in comprehensive-silver-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541381bb28bd073e81cf15b74de3bbb8a6a48a612c12ddd4b7fe62a524767fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...