MAL-2025-165173 Malicious code in riyanto-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6224b6f024619bc3d1ed933f5a7af9db7195367481c0aba92d6997a114e4d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160107 Malicious code in manus-tavauil-maoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11444f5497650d9439142b7c51a30bb04104740d6e8bdb8afe7d84aba325f7bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164603 Malicious code in ramadan-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 117fb027bffaa819dafc35b91d55ca501f83d570a3e09220cfdf764918644584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159927 Malicious code in manttu-muape-butda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3e6dc59efeeeb2b34fd62fb089ba105a7231b8e6b3d151d44752388e35f2c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151531 Malicious code in abu-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745bf7f7963bce481c1c669fb154b4f22990eba3f98e9f0eccba16d711dfc2a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170519 Malicious code in verify-ticaul-bisusayaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca94b3300d2b493d333887abbbf45771aeac9ab681db340b72a551d3bead43e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160676 Malicious code in modirai-igno-jimag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc04eb44ee43d755bef265dca6e73050e6f0673db7f117e07f932ddaa28fa97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158832 Malicious code in lookingan-namalaka22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e65a13191ceec389b8e6811300effa1bc50d71811f575660bd11d0f5dc5ff94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150631 Malicious code in @miptaa02/fgjhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b477948a865ad3b77b377b96bea9fde839436f56dd140682fb4a76f417c90c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158737 Malicious code in lookingan-namala27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b72ed022e9fa4546a51f30ad0455dcd5f940dcd26b12af86129cb95b36bd082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152737 Malicious code in arif-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af35163fc0f1c6c0a36018602abf9885416dccc04d5837187a9b2f8ce11889a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159477 Malicious code in manadsi-soradid-naidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577cfaee21deb33aedc308a92d901f1f411b7869c81fb51e946d1708f485f812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169699 Malicious code in ucok-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa936ddaae238d30802aadb009148065a41bc7dc9d67220da976c6ab7f7a0e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152782 Malicious code in arif-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483c23e61665194ddcfb9305d85941af9797001e7d16c11e5e74945a296ef02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150371 Malicious code in @mipta19/gfdhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a00444794c5437afbfd257a6caafecfcdfc48d9a83699df291e9872ed0ad62cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161836 Malicious code in namasae-namuda-mosa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758ed35dad9efa91b748a80e100a220c2a341620d812dc792fb182750614123f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153853 Malicious code in bitha-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64492da2b18ec219bc86f02b1e1629fd0dd0ccc459806719f5a9d023fb50ff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170575 Malicious code in wulan-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0df05fa5e11190477b33eb6ed24426437898ba498bbdeeeffd8d7ce17500f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157746 Malicious code in kuinsu-luki-kinatuomolagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61050d34055c24aeeec2dca1c030f4b584c1d3bff0ec418c52b09438ff93a7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149974 Malicious code in @mipta1/das (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b4099b63f5ffb029206e67b0fd552cfa4223be6398644acdf5dda12ad7ebb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...