MAL-2025-155788 Malicious code in huda-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b105ea58b369139c07d139373484c56a591ebf075191dedc073c9145845584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150064 Malicious code in @mipta1/isstdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e05c2f41e677b3fa59ef13a509fc12d4d1fdb32b89455f20aaaa268f64e16b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169995 Malicious code in uinsu-lotaihmi-nakanaimlu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd980a1bb689cfd1eba4a2bfb2a887a7d9592916eea08ace31c68f8b02db7a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155496 Malicious code in guras-visa-malays (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22b0d00ddfa61e09c6793366d9edb7068a5df36a1a5c8596fc368d846a67f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152726 Malicious code in arif-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3a822a400fab22a687271d5adc854e71bdbe6659b5e9722533a5fb00a1bf250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150240 Malicious code in @mipta1/sfdasr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4794f644c62bc1835ac68e02adec6d33ac9871f96a4e15432957379ea3761c80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150954 Malicious code in @miptaa02/stupid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 907c8c425aee0e4000f13c6d10b66f0f5b7d20f963278774ef94765e182fff90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163285 Malicious code in nokire-nanali32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c908de76ffe66b171f993b4aa54e38d50247768b709ce44adeade9e5509d9044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160294 Malicious code in messi-butsa-buysad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27126b804ce52bef4ba98402b0b22eccebabdd85f609ef3a3c6ec507467e2cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151008 Malicious code in @miptaa02/wea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780c78b07547accf86d9aa772da84f35f6128d30b0ecc7ed1e42e18b377c7460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152042 Malicious code in air-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f70e248c17c599fb14fe73c642cd1b6d3164f8e02f6695fe76779fb92d0fead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164345 Malicious code in poli-aki-aluban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c2e33f5ca14b6e9eb3c16fe7d2a47e58d494eb808b1b994d926b00c670cbe33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150388 Malicious code in @mipta19/ns-so1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a885bd290db8eda725e6582450776a934cad7adf99bb9ed994bb5e4e3a939208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152406 Malicious code in alita-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b91f11122d05cfeb0f0a2145bdf5126a17b49ebea9179fa5516134717cce627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163508 Malicious code in nokire-zabuza20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2edcd612ede454f9843c6717b527eebbd34a4e4fbacade9958176333f03829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168671 Malicious code in tealove-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02821f2b103d633dc71f990fee6db5a13b0ff00975936e1675f75a4e5ed88914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167486 Malicious code in teagood-nalikami82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e89f13c38df5d1092c2818a4029024d448f40c20ff4b696ae308e3a18d214d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156467 Malicious code in inal-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf59854f995eac24074a7b3db369940124ea33430905f4261b135f4857927042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154179 Malicious code in dajouka-sasa-t9a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e2050febc595a12a920c98451b7b61cda279b1a61a64f259b8a9adb84a7a3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153758 Malicious code in bintang-tea11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49426e1de3dedd19011a29cd37e78a5ff73bd5a9b4d6a56843c893450e7730e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...