MAL-2025-157077 Malicious code in jimmy-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9895b7fb3302d754c54cfb6f7d33b3f6153ff9190bd6a6fb49cbf63d74085862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165018 Malicious code in rival-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16820e333b8941ae3eb9123610e4b6c3c03c915fb73fc87492cecda16219c027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160680 Malicious code in modirai-igno-jimagifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701e3db1a6e8c342dcf1fec668969a9d3820afd08b3aefc1d9ebda498dc00dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158067 Malicious code in layla-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07637e32e4b64069ba7d98b62c9e5a62b0d4a22a1ed0b52da2f607a41332c702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158784 Malicious code in lookingan-namala7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212a455605ce7288b41a0322fc760fdfa0b40dd1d9f5f059ff301f81d25f004e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151230 Malicious code in abiba-alubai-ayata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6603d5df7c23acc17b15e2b807e5a0aa6a334e34d496e5bc16b5093112d73a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168706 Malicious code in tealove-reborn30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8ef2ecc7a4bbd12bf0ab0f6ffe60d606c03ea909c2dff9796e38c8fc726a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154955 Malicious code in fadila-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63275f8cf6b568f78bdd9b43df7f1557add0b45d97fb967f5b370d01fc81b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169539 Malicious code in uaragifa-ma-sayugauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3075dfa1bb2aa8fef5ac4d1970bf3678b5489359f59e47b83451cbbe2d689a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164789 Malicious code in rinto-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc32197d5ef15b6d7d2bd02a009697ba1538ccaccdc7470f161bd52643a1baa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149936 Malicious code in @mipta1/asaix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9e2e96dcba3be0618b9d5209c8c9bf8a9c251a4943422f799a63ec0da8a37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158767 Malicious code in lookingan-namala54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59d19a9dee706abf8b51411fc8b0382caef85dce03374a57eed0b0fe37bc5294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166005 Malicious code in slamet-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba1c01075ddbea36373ff1a2219f1055cdfa7537212916f34c2b41e808fd683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160585 Malicious code in modira-fuhopia-janiutasu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014c1db96c55a1058b9c41f0851c20c96c9cb60a4107fe6de6d36d53d3d4b380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162091 Malicious code in nokiragne-asiaifhafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe84c57e02f352e9beff8f7de46597508d76840264242b93a36718d25a636f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160842 Malicious code in muklis-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f564df8697b486d16a490c614c55f1b1e1c81fe5bcbd84473df7e6dfedd4b93a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163427 Malicious code in nokire-sekiya38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e83fc96a881a1a0b9b8e44adf0e29782d8938ef5e67d289e168a6d42b5bcfca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150731 Malicious code in @miptaa02/ijdgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e778dc04a22d81df929f8e5717bfebdad156e9639c67610f76a5357a4f97a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169946 Malicious code in uinsu-lost-diunsavvuta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb13ff78ca73998bf5d812bf5fc62034904696d9c7f23f87c8d55fda6ba4399b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157787 Malicious code in kuinsu-lukoiki-nsntabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74b785d009aa4cf823961bc128220d3002116f886a671af029b234ac94ad1e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...