MAL-2025-154308 Malicious code in dia-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 492d6b0ab515253967c6982f8774695af28740e0836a6f18bba601e378600d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164340 Malicious code in poli-aki-alai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3767b172972d4d77671bc776ec2ab0a0be3717c66ec308d04eec3a06c8c4cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150062 Malicious code in @mipta1/iru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9e3a436da7c0e5801166d2ea02f9a0c7b71b0e56b2db4fc1e6a0657ab99468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160031 Malicious code in manurung-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f4f8f9ceec0a040bf4baa905b21b948b38563ecc17eefa56f6154e7cd22dac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164709 Malicious code in rino-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e8fce296f9f5ea02660e629231ba9a10ffc4c9282432829aff9d92ccea2300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151997 Malicious code in air-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e26f9e9132fb1a56dc2fb99e55058b23f2de37db8ccc64c6ecfa998ebc66fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155972 Malicious code in ican-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa1cb93a76fcd0f64ef333317ab6ed1d7373e9799b9389a4c44868cd8a31814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161445 Malicious code in nabuf-otiganif-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ed6ab8d7c8c8873daa135e9ee0e7086f9cc07b351c0cc3c6d76e4aa808f810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152760 Malicious code in arif-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5df203085efc79ba478a63dda750d392123d59f9df41f66006bef542360e97f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157632 Malicious code in keyla-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 187465a7fb2b0cad4aac12147a2bba8a4aff986455389a804fb52517de8ab010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159371 Malicious code in manadsi-safda-muarda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2316c54af88a77b68d437a79041e5f67293ba80691d537121ef2b0d533120f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156017 Malicious code in icha-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2493d44d40022d63985f7ebb53b16b8093fca68719adde59aa5bdba3ba2b4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152205 Malicious code in alfiansyah-pok10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749a69aa245e63f23234306119159c19d1670195d24fb451225d23adcfe5c16f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166525 Malicious code in syahlan-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff6380cde13a406696fe8594661170192697769ce6129f4d3178265c24984b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151773 Malicious code in aciyua-idut-dafauhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2563f18663a8dc85c88620d2f20c0c72578d060d94f2059da3df1ed59bfcd7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167374 Malicious code in teagood-nalikami102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a987924275a2ce52961636641097603f17d4de4c74fd9d5c8fdc096c052926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165834 Malicious code in shilang-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8bd75327a2b4a74dd26b3d2098d4ded009339f42d7df14007f4cdc2c747040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152407 Malicious code in alita-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04dcf2d5c90e14a6f1d27f316ec1b6c2b21185be95e71117ad54b6b9570e70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163119 Malicious code in nokire-namiresan64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c07c5b65f502769d2620f3e9ba4124601636f411ebc05caf9d64343146806b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150998 Malicious code in @miptaa02/vefgy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409d6f936c1ea1ca70cc49e1362de3749e33a31a29bda77f62b6704f5bfb5da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...