MAL-2025-169638 Malicious code in ucok-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6031120ee2744e4f353cf279eed6c30f127a29ae1bfa92722b63830c917b75f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159039 Malicious code in mahnud-magu-naibkufam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a78d86604e5e9ac78d8ccfc0fa836fb1778c4d3b1abc32653f0fa1baef67214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160561 Malicious code in miracle-dokoi-unisakaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 077ad7eb51164b07034527a74008635e610a64fbc8837a1c9accdd21d4a09715 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150654 Malicious code in @miptaa02/fiss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 275b30f3b683829e56472d37f4a5e0f1ec58b642c30a8e88558b97a974163643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164782 Malicious code in rinto-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9525cba6b27cccf1d7147b55812e437e571b6e2d288cc8765eb42b856c6ec7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167254 Malicious code in teagood-nakama85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b793ebde30eb93b9f7f4ab86b44238828df653911f5cf21a570136ed0c1ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166040 Malicious code in slamet-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce948319d64f2be4b2b7fd028280baa53425489438ec016b5a56f7994af8621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150960 Malicious code in @miptaa02/tad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da562f888890c32cb642d6a9a3c9d19be471f3d60c1909b01618dd762277e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162209 Malicious code in nokire-abimanyu90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25ad5e98d940e6ff708f24d058ec290d19616f5897bb7990fa999d7eefc2c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154795 Malicious code in ewa-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75966b82a52b5d2dfa05a9f88816198bbfcf1892a96e044ef8daf83d3b24f2f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165562 Malicious code in sabuvauakli-nalabui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bfee167fc92c467e16beee7380f6e3c542017d4fdae7502ed80c99cc61b74f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158638 Malicious code in lookingan-namakita29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3d85475c2c0f8269d72ae4241856acf6c080a708c8ab5b8583e8dcc8d28e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152676 Malicious code in angin-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c829e012b94c7ebb00160fabbea8f78f88e683be249bfdae076537d7d294ea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163089 Malicious code in nokire-namiresan37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b781c8aba928b3f1fafef55a68b651b3bb7dbdd3614a69380455c39a5fb90b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160816 Malicious code in muklis-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0acdbece11216d9e2fb4ba455de5a6648246332116711dcbaa5d327f5713081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162699 Malicious code in nokire-kore13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4743995d967658787873bf95d9dbd19526c8f567b010665f6829c9324e86f3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164273 Malicious code in piluvaka-kaiuabulibu-nunubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42d9e35bc1f66fe080e2ad2f920123aa48c402a8e41854fce2a1e027b198f6bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152551 Malicious code in alvito-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08233c46cc5ff9c1dbcae74d460ee16cb29be246391dcc28cfabcdbd6e8db76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162335 Malicious code in nokire-arhani24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb2b6cb4684d5d96a1ec2b4a36714d90a705f0790ded54f335a4e9046405831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154867 Malicious code in fadila-poke132 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b9bb479e339668d64d5729b29aad677f0352dfe0bd2f7befecf99ecd2e1fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...