MAL-2025-168121 Malicious code in tealove-boy16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02455dc6993c60cd8afb29c94ba0f3e62e295c98bc5bd0dd2c1128350ae4e67c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165604 Malicious code in saku-aiaku-umui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67fd57667f2485513743099c5f35d718228a8db29c3da1e86fefee2f23af452f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168732 Malicious code in tealove-reborn9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41eb299d7411df5a51084ba4427c450b3003343aa4096321abfbd2e2215c82c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158335 Malicious code in lookingan-konami71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67928608ded2ada3c2365f1ad8113a70fdd4f0704803ea8bb112d629d72e7e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156588 Malicious code in intan-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391815ce122232fa9b451f7bd8dce168a324f19e7f76d8aadcf01671e945a7e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155201 Malicious code in fitrok-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2a8c8f44c28c6ee3f5a160b878182628e2bb81192f61bef5eb652739fbea1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165611 Malicious code in saku-aiaku-unusia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902bfcfdf304a98028b1ca2c652e75d4681c69a1259ec19f185e991f905ec5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168301 Malicious code in tealove-darknest43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c4c77b7b40bf69eaaa9b79e805e96e11ff34177aa4c5c83aa273572da412dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150236 Malicious code in @mipta1/sfaar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5f6aa7ffc6063bb34979fa09da49f026d5f4f4b16b07411d1e518bd669ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152747 Malicious code in arif-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617ae6725887bc888631787398853e3820178795df6dd1d98035803ae61d3fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161221 Malicious code in nabila-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d4f7c1a918d52f77264a8fd8cf3565091d273fd2643409134691e47e1e43a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166555 Malicious code in syahlan-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a696c4ef9d0cc0170fc7b1286e1ccea65b9eefa9127d08e774fc9215f846d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168216 Malicious code in tealove-dana11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3635b1fda43e171125484895e92a4110244b0e13ab2b4f21abe90b1c18ee2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168361 Malicious code in tealove-lady7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4858185fd534ef3b9c265abb401fd5bc85975d69628d3e9a75b696650e500a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161569 Malicious code in nabuf-otogamafian-djau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd7d04e17e3c64015f8ecb2cfb4c79aa3daab3715328a91e053fe6b990a4d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155919 Malicious code in ican-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eedaab83d95904a4ab2c2689ada140fa5027d623630d6f20958cf3e08069cdb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154940 Malicious code in fadila-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa4ebb6a2b96c8737a3c23ebcc0deb06ed46961d45cbc3df25304999aae93d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150576 Malicious code in @miptaa02/dxsfxfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c84f91cefc6c46c190b5d17a0972f3f9ffe21231c11e01bcf10227a5bcb8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162478 Malicious code in nokire-asaka1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13dc6540476807f4c66b6b01ff1fa95bd7bc879e0fb4435e8482384dd2397fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164645 Malicious code in rino-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7682d84093faeaa4cd6dfc24d1e97e68147857300d683fe1beec6f4ff52473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...