MAL-2025-164620 Malicious code in ramadan-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c1583c34bf4970c6a5d05cf547ab434c5328adc00eacbc251a13e53357c1bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150876 Malicious code in @miptaa02/nyaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d9d3b5ae2e0b4217e9adf4e59a8268e5d25bf0a48f7288f4bf0d1a09750566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155832 Malicious code in huda-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c7098e08baad0fa3f18f2fa7f10ea168a521c4b01334dc6d0619d7ba8cd317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153069 Malicious code in avminah-fagiaas-fimokafiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daa82c7a183656958d01ee807c47b54ac03943c8d2ed9fd9f2024dfab7d8815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163653 Malicious code in notasr-suck-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49cdcc278a2a31dff21f3817e2dec63fd20f7971245e228256634947f89bfa7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163295 Malicious code in nokire-rara10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887be60a30e60062c849c026c1329bc54e027442bb8c428141b89548dd68076f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152007 Malicious code in air-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b0ff94da847e2f0638984c15fa443b25104d21a1614303d4a94136e17167cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154850 Malicious code in fadila-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17f2f2f906a42faa54558f44a256caf4ae27c4bdf0bf4c687622d684186db4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152139 Malicious code in akabia-aligama-aibava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820dc12081f8d7893b3b317bdaf42950650c80d8ce5ac8f54bd504fd0ed54a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156071 Malicious code in icha-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5dce92f973e167e33806e6019362f1a8ff4c61bef884ab37826f90b9f6314ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166436 Malicious code in sunderlan-udk-vakumnaakuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015ad0fc4724d26ac83e32e99ad863986fb178e461a0032d6c2f6d2182d7ceb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152864 Malicious code in aril-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db1546b067c19f14ae96cac27fbd04209781b32c2db334eb6e13d74dc2caf6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158519 Malicious code in lookingan-namakiki11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5eead674388335afbd96857711170fe909a0ce7c109474af61df20bdc7b7243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156669 Malicious code in inufgi-gotma-anamufozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d982c6de76de87e1adf14f6069dbc6ec6e69c64f7047c7478b50e12f0ca7736d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165206 Malicious code in riyanto-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5091b13c35e5a5519e42810c212c2780930a6a61c0694f411d016512b3214a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161327 Malicious code in nabuf-ogauof-dofufsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99368d0e092cadf8156538f9f098cf57f9188bd6cb7411242c8c56c85f3e3533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161438 Malicious code in nabuf-otiganaigf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e555aa4de351945119f690ba73888c92b3908c89088f89c312136c4b24fc7f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170285 Malicious code in verify-aikun-misualaibaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 993f08d7d4d467932304e80abf2fc70cd4ccddbaab17dc28c51ed4d99a0825e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164503 Malicious code in polymeria-yuio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890769202b938529972deb19414a72703b371d94d74251b2d3a9bb6a733019a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151142 Malicious code in abel-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa436b37cd00ecf8a1f3c427f40600f28ced17dda0b2d4dc8787989460f648c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...