MAL-2025-162459 Malicious code in nokire-arjuna46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6ff56e04201a94dcd0c052981a9eadfe24def40d9813f33acbeda8a46d8984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168442 Malicious code in tealove-nanami14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c706a8ea1c6ce2934d268a1949068c7bf07182bd3c0fd3427e17eb2f4168339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151905 Malicious code in aiboa-molpie-arioai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 111330160a869f6e783b976cdd76c06dbb2dc58e847f127bb5e410af0a1d40e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166544 Malicious code in syahlan-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f966823f7a6cbf1f19aadad03035eb135e60a3b5e524119395e9348c2ecf702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165732 Malicious code in samehadaku-qszess-ur7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81244c1d64b598dcea35ece22eff67b599e3263f07751b34d2a34eeefd1dc7aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150194 Malicious code in @mipta1/rzaedcx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a42f01e2e35b99914181f526670ec5a1ded384a3b15c4e3d7e0c6ee80dec694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156980 Malicious code in jeep-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea942da907f370aa1baf33efb871e5fdad08b8ada9fd1e6bc18fa48136c8c0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163555 Malicious code in nokire-zabuza63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60d3319a8f8f18c268657af93a975204f2b187ea8d3fa0b6aad9ef5a87e4bd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156222 Malicious code in ilang-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676dfc9152ed211ccc6a80b937bfd416e2ca1b8c0f603b80edc43a53e2910f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155631 Malicious code in hafiz-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be769d101e524741656158b20de31e8deb86d03daad1ec1d2c8d96d7d246e378 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166586 Malicious code in syahlan-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7955a5c1778386e8418610fb7ee34d208c21ec31bef4cd2ab5ede94fd843339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165147 Malicious code in riyanto-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199ef657d1a64886457d29f755f4d68de662bb665641b13742ea531693256b5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164702 Malicious code in rino-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78954586fe925ab7d43d485d254af5dc31373fed0ccddb464331cc697e123d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150618 Malicious code in @miptaa02/ffsg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04c48e0b981707d4c16ba42588522af867eb9512ace15f259d04bb91dfe1745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154600 Malicious code in dian-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dfaf8900f13e5a3a486380966b17d15792bcc682e52d2e0b42c23907b04b20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157003 Malicious code in jeep-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa291a6c693e4e29bcd54629db7425d43b05e2489d232411a5cbf10fe2ed879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160422 Malicious code in milaoa-duio-nsastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1968ab37cd5bba579758d56cda8a2a10e9ce2b95e61034f9234761b8f417f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170048 Malicious code in uinsu-lotsi-banbalikami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17c8ea75aaf214748563f2f557268929e91669abc05d9b55e22caa0c2e17740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152904 Malicious code in astia-al12pafef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38eea4dac8878df162b9c85ab448562e01273bcdd5944030e35889463bd7acc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159221 Malicious code in makan-aiuga-uhyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c907b2e50fdb23c3e6d2a248769fdad960b9712bdafa928e9db7ea61e4b165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...