MAL-2025-164233 Malicious code in piluka-aluni-ipibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea438574b260f2af248b4cadc118d19e8938142ff1ab15a6e2796d148813aaa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164954 Malicious code in rita-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d095884c539343405bac5b43c4536f3f8ee133cf5d172d933bd8818b48ccf9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154458 Malicious code in diago-kuli-luui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c94a6475921c6a82fe49028c914a033a2f9f551dcb947a1812843cfac9c1166 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150759 Malicious code in @miptaa02/isaqeg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a022beb203b84be9c744de80a4aaee9bc8e2a04d64b98fcc8387f1c76d6f6f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161588 Malicious code in nabuf-otoiman-igamoigaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43e1df098089bb3bacb65fd26f85c34723d4ed07e90fad048d16d12889dd4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151362 Malicious code in abina-amogoi-anuhuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e06943940963ebb199e31de269d6d2b0eb50ba4782003937bd563667282579c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168453 Malicious code in tealove-nanami24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e3aa7c104a7b58d0fe556cad27f16c5f6cb67d84a453bca407f828beec2a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165710 Malicious code in samehada-fzhs-r7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9093451aabb3195bc16518c3f0db592c64d580f87f570e09938cc3f768d0a937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b095d11e291ff9460cca1251e0dc376b73b8f8f19c9e28a9ff4cf473fc62d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3419c98d899c4be48c51231c3b5fada0618d461ec538d3cb61522c169bfa2cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-goa-jamufg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efac58378d2d81f70bc98fa8d0636b5d31293b62f583ea7f7eec49b07b0b8f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector affdae2b97aee924f4833a2b8c24c4ccaca459d58f90e0a2de27f42b880bf8c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046ebf01ecd973a2aa35ac3c8daffcbbf378aa0bf70a1626d15543e60cf340c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54e29bd50fd992bdcf158cd9878b8583662cbe838a82c69a918ca14aceffd73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153227 Malicious code in avminah-fagnias-ifiafgaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a62522c95880abe55de5a4020b065edb806b3ab8164a40cd181f0ae99efb344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152370 Malicious code in alita-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dde1ab3194899022f51b0ef4eb0163e66f49c1b17494e9c7a24d1374e77436d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156205 Malicious code in ilal-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15254705bdfd7aa3a9edf63cd8a51c2b254033e8867a31d418cd87092204a8a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157096 Malicious code in jimmy-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f74b9941e9cfae47a1d3c8ad4670405f8281f74d39ca847df3307f517a14ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155803 Malicious code in huda-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429506eed8fe7839ef21225738f1c067485d85efe98597f7caf81436012af58e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164854 Malicious code in rinto-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f7151367175542b92308bf6122f7353e7d5b732c86a13231397832220c11ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...