MAL-2025-154310 Malicious code in dia-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce86d8d51739c31f3debd7050598b48e692365eef172fed550267e2d7252b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156636 Malicious code in inufgi-gobgilai-januqga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2970cc97a781609369f60d01bd1d04833db230ff8a416373f3e7bc6407a4814e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168267 Malicious code in tealove-darknest12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905e4cf7787258ce304b5709aa3e17ce08919ff9557c1b369df57ee9d1ad731a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154640 Malicious code in digo-kaimoi-aii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b58838f2db4d3a93e06411ed0c638dc64b77f7b483a794bd7f90121bace4e496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158239 Malicious code in lintang-tea76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e35610bb125713f817246fe386ad0871df1d8ab32ec327999e5243620d11e70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165352 Malicious code in sabua-muhay-taum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1dc4d50d5470bc8474db2c84d5fc96d6a8f76639530f3f405b36c7b3984307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164080 Malicious code in pilau-akabaliu-kluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5865de3f4a5c595dee1ac2638ebed532c5a93eb8eb1cecfad4ff2bded9d9b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155874 Malicious code in ican-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d891f670a1eda926665856cbbb7477f49cb5f700ee07944d803711f1e4d3b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164959 Malicious code in rita-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86b0e5382ad7b5d4ef9ecfa9056a7c75c97e35172743c43bafa6e2296b16406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155242 Malicious code in fitrok-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61cfeaa8f317cff793547c388713b40fda37fc94a4cb2f139ec43a67d745a371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169583 Malicious code in uarfug-mitu-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e111c5421e27746bdd13f0904c696f9b124bc673b23a13276808648428eb98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162424 Malicious code in nokire-arjuna14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40b70ca6a3624bf1869f1827e29e30ced26af935dc446c79e7f59c5379d6d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150920 Malicious code in @miptaa02/rimyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11dccae47118aefffc26327978cafb5db8018825e73cf3e3753abdbd4dd98b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155236 Malicious code in fitrok-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a74518bed0c212d5dfc2ae4eca65b7a5ab6c2fa3485344f242a7f370de5c525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152007 Malicious code in air-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b0ff94da847e2f0638984c15fa443b25104d21a1614303d4a94136e17167cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163653 Malicious code in notasr-suck-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49cdcc278a2a31dff21f3817e2dec63fd20f7971245e228256634947f89bfa7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152159 Malicious code in akabia-aligufi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98cefa73b7346c5995f1ab14e30c1d91c737d30c55c75d2000189b5573ec899f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150538 Malicious code in @miptaa02/awe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16663d3f976bbabe88bb9b2478da3323d1869dc111a802aabdf12b276df93f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157596 Malicious code in keyla-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a217210be717482b886905fc3c1d6c7408ffc490a725286f9f3b082faa30309d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158998 Malicious code in madr-vs-munchen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dffee132760cbf57c5ea208e17e605f6c3703ca33d52739e32e3715a2aac67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...