MAL-2025-165076 Malicious code in rival-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d5e48138a00eddbddd32c363eb7df1dc8db8516913a16dad6931b8af3f298d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160652 Malicious code in modirai-igimamfo-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942253d5b969f97632b9bc541b6adc07f368abc88f8aeb1f6f7b6f139451c97a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154389 Malicious code in diago-kamoli-liumaaoho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b984e191772671a443a7a2b1eb35230dd8f29b6d675452702b8178f05d4e384d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150683 Malicious code in @miptaa02/gaxzxody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf616ad04cc24ecab03d08edfcedf9c4625148f8dbb62325e583847bf1040e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165366 Malicious code in sabua-muhufafyu-tadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1b6ac4cb25f3fb0c4088f0d922d997966bfa5d040ed9057b4087e7fbb84d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160937 Malicious code in munir-terd-terb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4228e79316fd881f5a107b6f3f400a6f8f51d15ea0b6b0e1cea2f30471adbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151242 Malicious code in abiba-alvabai-aytabauta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f96de5325930e9aa32f1bf31a7f22f74bc2b75561c9ff074737f5bc7da8b659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160839 Malicious code in muklis-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad467dcdfe23598c5ed22c7ca4833135bffdddeaba36a5f025a80e79e81662cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170598 Malicious code in yuda-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51aea3a2de31dd035b1b361e1e81cf0e1fd37701820c9d85e94b444fd5431e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154819 Malicious code in ewa-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75625d8ddee542d9844a25c67e63f4c03bbf570737590e1088e0a32c95a205c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164230 Malicious code in piluka-alulni-pibalima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0999c5a78af08c4c047b8e96a4ef6f411e39c46dca6f952d2174741faade6aa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166453 Malicious code in sunderlan-uyilud-vamuinauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b6eb82be8787b0fef2f2e2c592efc37722dbdaf8778abc939dfdcea10f6063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161190 Malicious code in muy-mutfru-muytio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be034097eef67ec9fc7145850f4f54d4bee457730da4fe85ffc4489a014054a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153103 Malicious code in avminah-fagias-fimokafigguaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4203ae91b841bc8dee99dedbc48afc3a5055419cad34ef10b0406f5578c1e224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168425 Malicious code in tealove-nameka41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 626aba5ff66d2917cdc7be9dc51a911dc328d6e80dcbc21510a4034f3107fd81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15a161d1532e13be2704cff7da5254b4244ce9b9369b3f4fadc395052e40db33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160683 Malicious code in modirai-igno-jinagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64063b884ef87e5c42fab6867ae1f23cacbc8a4f1e579025a65859f0df0f3224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157200 Malicious code in jurss-gssad-14s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3055e93838fbe7bb2d80f62c4fbc24a4ee028fdb3f808d44aea93c92f69d4e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154046 Malicious code in cinta-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b870a01eaa5a0944f282b4d14148d4843716d5fcd1a4269580ed09eb6dca0ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168945 Malicious code in tehah-baut-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fe6bc83e294f34daf83030b7bb2e76c5084bdde1a77a3942c62a84b266db96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...