MAL-2025-162534 Malicious code in nokire-genji45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656f45b206708f51a823e3dc1c8c294528f818b1b52653d0e4e46b5764f13489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162026 Malicious code in nasution-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da104221e36a93f06404c02f324f2f2d0cac8443fe0231d50b2068eb6c51eca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164426 Malicious code in polymedr-mindatas-buipenajar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6787064b18250e77ba327b890bc5687b1730746df92257ad002d41bd497647db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160457 Malicious code in minahasan-munaro-ps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bba4325c9bb357d26e83d2fef70095fff94b1fb88e9f873bbd75f3c614e6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156178 Malicious code in ilal-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a36f0e55817077931bd538b94640a942a98f7e32d5c2f118c9a23d50c66f51a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156702 Malicious code in inufgi-gotumafa-anffafoaaaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4d3c950e4e8c247daa713b4de601a8e877f4e330f5e4bc25205bfecd1387d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150957 Malicious code in @miptaa02/sxhdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4372c71d31910339b01b69cc668f7930ca0a4b97334dd2365fffd36d3ca904d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158404 Malicious code in lookingan-nakomi44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360f9b9a842e6c9ca6d3e7130e8b8f698d2b0a35fba8b8908c57b9435d8fe99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150818 Malicious code in @miptaa02/mater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4feaa71b5e5611946407b0051ce54322be43a9c7e4e142ac5e1936632cb155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152337 Malicious code in alita-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd65919f348ce56cd31ba18b6096b324104b47e53166044761843a219e7ebb0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157533 Malicious code in kentung-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d153037546b444731f53296b9dfe7a57278749d65906ed5d7b40f76d6b8c326a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166555 Malicious code in syahlan-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a696c4ef9d0cc0170fc7b1286e1ccea65b9eefa9127d08e774fc9215f846d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164365 Malicious code in poliaina-aikki-alai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902f348c1daffe74021ad4a7dba97337c2a09f268a7d3e5cae95a531ba626267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166134 Malicious code in suharta-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a15c025e46662c20f9cef335d33322f57ab28f7b1b1643cfe26d98a0730f2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166059 Malicious code in slamet-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17bba3168632f0a05d263b4ff5aa5749bc677e755562e5aead7fcb10d85ac304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165722 Malicious code in samehadaku-messi-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c761041dc10e35698d3bd7a87bafdaa4f18b1453381a48890148321cd5ea389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167194 Malicious code in teagood-nakama3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91fc02f066079e18b01a11c14cc983aedd1c9b54e64135ec91d63845279ebcc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-maasat-buyada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e4233eede2e276524234cbe91a58dd5e38173924f574fdef39d9b80c7b9900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0503486347f606f86ed470cb398bd754df2714fbf2011cc7bc9167cfca61c3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d348818a6346cf6dd0780e983e8115d2da08cf25d2e5ac98e9e3bbc35300339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...