MAL-2025-152320 Malicious code in alita-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abccb8030ed10f40ea0d86d1766f19414efcc2f80e5b04768fe3c5d9f1a5f15e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152760 Malicious code in arif-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5df203085efc79ba478a63dda750d392123d59f9df41f66006bef542360e97f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170091 Malicious code in upa-lubalauvalio-ilgsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfaae08f4f13c94f1b0780e033615dce7144ef16ea861c118390cdda19f48e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168062 Malicious code in tealove-aruma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674f6ae9388e857c3e7de41f71a34846fda3587020a991c893006c8b383653ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169816 Malicious code in uinsu-lisa-amba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0bae38c3416b2643f5b64aae5718f029747d03b39db59c491e421bb9c3cbf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158322 Malicious code in lookingan-konami6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6e91f48cfd128ed0036181b8c7680c774a88429bde925a040d98441a7b72cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152205 Malicious code in alfiansyah-pok10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749a69aa245e63f23234306119159c19d1670195d24fb451225d23adcfe5c16f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164076 Malicious code in parwo-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c5f6a92670f0bf482ebb04cd3c90ca248d4b0095b50b2707649706b73343a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154919 Malicious code in fadila-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a226894e106605020c0772f62b02a12859e6bd9967a204416fa67cb11ca457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160730 Malicious code in modirai-imgono-jinnanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada3ed6f44a84a41dbc2bb984fb7a4cdeacdd7f76b295d77870552ba22f2ab40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150052 Malicious code in @mipta1/iaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc0998e12ab7715d5220c445fe2e2aeb1bbf92aaf6e8df8716efc77401b6dc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164779 Malicious code in rinto-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7cf61624be4d346a201b0ea00c34142112d0d8cb28e60b8ba44329b100fc262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nitaus-r2ff-deff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e221bf8dc3b164f81b725ba5f8977c2d85c67f2a47aa69076e79d1d9706aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159740 Malicious code in mansida-nomaffudi-munau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2bfdb03b44470ff4d39d8068713a58ce10de4bfa673f5a3708bb59f048fac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166834 Malicious code in teagood-cuekin67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b74684a069e58890ec6940ff12e6a8ec19360c0645c261b2934d6e872f19ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162250 Malicious code in nokire-akaza38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1fc7d4508979a273270751ab5fd6fa2a92088b5b1f5345343138e28e24e1b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164265 Malicious code in piluvaika-kaiuablibu-nunubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73641475ca02e679f77691be20a2c71871fd6679d87b26db746e6786068695f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170226 Malicious code in uyia-iaydut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a057e94b830ba8e1807669f78a8aacf36dd345bfc63d6b5001915c212d092b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152616 Malicious code in anak-jalanan-mdn2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cfcfba778660716a6c5c877532ce4746c04e4c2460e4409070d39bd7e87ee90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166314 Malicious code in sunden-dibok-inumaliukinuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b461a2827eb37e41379b82f56d4538a661e789e9f9c836235542c392bdd8886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...