MAL-2025-155661 Malicious code in hafiz-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2ff43fdc1eede051bca13e19b511f96b5b8ae281e5f6e49214afdd509b2502b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152213 Malicious code in alfiansyah-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 346598f41d9fcebf7283b9150907264befe8350602f993cce00deef442f589e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150872 Malicious code in @miptaa02/nyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea117e672816a60b9b45533afeaa676be2ddb60468eab4a954dd85c3c8943ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157868 Malicious code in kupa-lubizfzlio-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ae00cfe08c670035b1f3559e691e9fe1a3bff7305b98db31d39bb6573a4c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159482 Malicious code in manadsi-sord-naidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b327d2d563af453472d134e74ef3d0b2d1a13864df3d89388a0fa8b93cfc9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160603 Malicious code in modirai-fianha-jinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf9286f323b70b65e35f6cb259c9c8b533f0a52dc25ce4253fbe5edb2552578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167934 Malicious code in teagood-yakuna72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a03a40a47098c8ffdd398ed861c5cefb60c37a55bba9d8bc8fc9cb0772942ee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169741 Malicious code in uinsnu-lotaizmi-kulsmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68ab86ff69889bb7e5afabc28ec04a8bd7f031d490f0a79bf44c22e1f483125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159201 Malicious code in makan-aigooa-iutamafafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbdb5e64952dd025f49a6830f18cbb37c929cc18da76e434da16e4f44f31cb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160587 Malicious code in modira-fuhopia-janur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc8c4428b62739c045f8d41dc601d306760b04d6175bf31e9bb3251c1ef000a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168116 Malicious code in tealove-boy11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c80fa2c450236ffaeeff264fe795be4f679b02daaaabbb98221deb345ad21379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166056 Malicious code in slamet-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d85bbbbc15f102fa904b4be509efc4338b23741e92584d892e3e3263c490f6a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162813 Malicious code in nokire-lokcek57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d561283d4446e38370cdb6e6d46c707d9128a085bdad4919027bae05eb60f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158521 Malicious code in lookingan-namakiki13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae180f5d2238a0dcc498a9aa120084a589a192704ec4a9d05e92f446e84c94d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163608 Malicious code in nokire-zenitsu21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63faae6b84c62915fc8f221b92a5d3ac950474f4022a160a5dc4c828b088f66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156346 Malicious code in inagi-vumaf-nagafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795d3057af2228ac9e20ad7f5b50d5eeb58716e75966f13009634b02024bfcd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169050 Malicious code in tehah-nuya-buyada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb848bdee39ff11789d193a944e16c14b36b6ae3803846a747c6e385815224fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158192 Malicious code in lintang-tea33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09291a8b5ac51d5820bd33c300e9a0718ad24f9ad283359abeb4d7c694d99d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152246 Malicious code in alfiansyah-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 186a2534070ebbea7871156a88111cb9b2ead0cdc789c8d87d42d272fb708f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169668 Malicious code in ucok-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd26471e243d1f535ea200a2cf400b26fb54e723abc6129fe3ca10be1fcdd83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...