MAL-2025-166120 Malicious code in slamet-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f36c5cf9dda9b87706a5622d7200d62a827984b3eca5df457ca9cdc9e9851df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157630 Malicious code in keyla-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da5aadd66d32bb3dfdeae37f6535467297dcb915776e3b13cecccecd5e35202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150363 Malicious code in @mipta19/g1enser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8e70ec97cdd87901f00bbd520bbc4ddb7952061a7ef4d1bb625992148e443d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154796 Malicious code in ewa-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168b744e98b5bc12987f23bf1614a4aae54587c4201f57247df782b8af5036cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158280 Malicious code in lookingan-konami21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1238fa2723274c41bbe062d927bcefe6b7fd3d5b32aff330dff2fbbc3ed915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169176 Malicious code in trevora-cir122 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b9f4a6258db43f66400fb79549d3e048c6e9a840956a6807053b77b8e912c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159014 Malicious code in mahnud-futuaf-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3d6fa9c21270d1b34115c03ec9e729105856b61f0a8f1d9f67549cf911b346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165194 Malicious code in riyanto-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d63b1f123c38568e072dd7bc48ebe26e0d0e559afc7fc95f89ef69748e6958d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156178 Malicious code in ilal-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a36f0e55817077931bd538b94640a942a98f7e32d5c2f118c9a23d50c66f51a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162534 Malicious code in nokire-genji45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656f45b206708f51a823e3dc1c8c294528f818b1b52653d0e4e46b5764f13489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156702 Malicious code in inufgi-gotumafa-anffafoaaaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4d3c950e4e8c247daa713b4de601a8e877f4e330f5e4bc25205bfecd1387d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150087 Malicious code in @mipta1/kalad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797d9aa4b51b7d2c1be73bcdebec1ed204325c4b76d8cf5cc70448e4dc17c434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165354 Malicious code in sabua-muhayu-taa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb2e4081ced2c620b7a77bdcde935f450c8b655db709843e0b2496af3446835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152337 Malicious code in alita-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd65919f348ce56cd31ba18b6096b324104b47e53166044761843a219e7ebb0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156961 Malicious code in ita-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04719d651317939278d9413384fdbf46969deb036928d5b1062859441ba43e57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153928 Malicious code in bufda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f03cb2dd8f2cdd8dfc9c26fe6bf4b048858e26d293abcc6907da9f026122a9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150957 Malicious code in @miptaa02/sxhdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4372c71d31910339b01b69cc668f7930ca0a4b97334dd2365fffd36d3ca904d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150073 Malicious code in @mipta1/iynpug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 836d80b765c53e77811f0014d851eb6441fd08e1737a97d1db08b2f2c83c60eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162517 Malicious code in nokire-genji3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec4a3af141f6946205e9a08f9474387a37522d799bc0b6772960a207d577d55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151037 Malicious code in @miptaa02/xd2hdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c16f873b49f5e97109c9965c526710098faf50a1c82f0ae095cbfeab7ea5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...