MAL-2025-152124 Malicious code in aji-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcdec47942174cf618e9d97263be9af576d44a92c96a39fd0e21c7cfcc2dd184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165531 Malicious code in sabudaaopa-muyua-bafuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920ca95a111ee3bb58d786b819fac833a25c2529cf55ab599b22d7f2c3d2e87b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161276 Malicious code in nabila-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3eb48f1115d876202359a1aab1e89de170d2d2ed6eda6a7159d6041093b4f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163796 Malicious code in nudela-ofgaf-gafjhhsaaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c0bcfb7ac25ba27f4c552dec162e6f4ac384d4a7dc1fc9ae6b18be670138f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158720 Malicious code in lookingan-namala11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c5ea0391b3a3d646a0db3702661d4c0298a7b811e35734670319b44357676e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151034 Malicious code in @miptaa02/woh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08820a33461284585bc6618071e21ec266f93156f83bd507d3cae8be8d76f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154487 Malicious code in diago-kulp-kabakuoloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58ec9d95374efb497de4a6bdf7650f7d34e96917df5acb4a98f2d63a1080c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165572 Malicious code in sabuvaukli-nalaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc104f6536dcf172fc8af1676dbeed8221ca06862b2a13a8caad216e5956e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151410 Malicious code in abina-amugyumi-agu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbece1c8bef7e996febb21c4ea67e915b4d8fcb4e4b31cd572f12ba1887375e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151059 Malicious code in abang-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d7a0e775216b50873b87ad3cc401bb2c5787b4eb61f60903a8a4990ed9984e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150954 Malicious code in @miptaa02/stupid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 907c8c425aee0e4000f13c6d10b66f0f5b7d20f963278774ef94765e182fff90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150763 Malicious code in @miptaa02/isog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5831d5d27c6fa2d03857dd3762ff796160fa57a5a41ef550d0280b77643af36d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161627 Malicious code in nabuf-otoin-agagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea6d5242323f6d8ba3389acf65c4ea9c136ae02bd4a92f86c8c2107368506ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165983 Malicious code in siregar-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad48745449c42b148f5c962f319e4b4b70928879fa1a5c594a7372aa2d9586c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157177 Malicious code in jurss-gasd-a9as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7910ebe922445f09d1be8ac7c39cf0c845aea16cb54d06afdd5efa3121a2d0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164782 Malicious code in rinto-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9525cba6b27cccf1d7147b55812e437e571b6e2d288cc8765eb42b856c6ec7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156981 Malicious code in jeep-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6e649fb762a1973f4dc31705e54cca7d3489cf470f898c0c32f4d46c0d8139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157097 Malicious code in jimmy-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8691dcec0302aa626cc96de7635ecf4d32b2642af41ad39317c4d64c245172c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162873 Malicious code in nokire-loklok21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93bef10120fc4e7b45f5a11c2502c14269e652f4ade6ab6c991aa034b223616d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163615 Malicious code in nokire-zenitsu28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7875b40916f94e4efd6e4b9e79bf1a6267c9be238c70440a3de06cd638a8b5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...