MAL-2025-161894 Malicious code in nasrul-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281d30a3b6ea3e8ee4b329e611e9e3f055c88e7604996e7c9834e3dcbaa2994b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161492 Malicious code in nabuf-otin-afofagoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3422a3efcd8060fdda3367c60968e2e2c98f9154c8734693953642234c0784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169913 Malicious code in uinsu-losit-dilabbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20d6098306a51a2943c3fc30d2b33c6ef7b2e7440619ede7d5f512e559d1172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153054 Malicious code in avminah-agfifaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1411b88f25e8f76e28147701271ee59b69862eafb6450376b89a8f31b1422eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170189 Malicious code in uyafru-tuittat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0bc5f583659758f313f7ba15e3e490891be30ae02e23534d751792b736e2cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155153 Malicious code in fitra-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a310861ad04921a32ac5bfd45bec205b18bc71861950a875637e27fa15f81322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167137 Malicious code in teagood-manaki7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee5bcf9df6aa2781957e35443b47ff7240bd46db2df72ecf08f2ea77cbcaa4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165016 Malicious code in rival-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eceee00e144677499d66d0dc70955327ffb220360112d96f21a23750a45673f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167996 Malicious code in teagood-yakuza39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2132dba51aa3d0839a3eed62d2c2e93bcd2c57fab847e0cf917624415ca53e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150792 Malicious code in @miptaa02/kkbd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ff679004bf780cb290f83a35d128023e14f66c8bde405f67865d7436937536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152449 Malicious code in alvira-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc805477c2e1712991f3cc6659b859cd570b4b9205b2348649dc60f5abaa8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168309 Malicious code in tealove-darknest50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc7d68dd97577a908e4ebfcfdde92aee58cdd0ebd77bd5fdc036de6980ff9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158144 Malicious code in lina-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c13b53eb25e31a3761d54a8df74e6307f7fd7848a4d806f409ae474fb251ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158025 Malicious code in layla-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51e89d986914bdcdd560f4e212d3079ce58c7af8bc081a06b8e63c15897980b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150872 Malicious code in @miptaa02/nyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea117e672816a60b9b45533afeaa676be2ddb60468eab4a954dd85c3c8943ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163957 Malicious code in parwo-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaca56dda869955d6517f719731fa03985268b2851c6402671c9c3550bf336ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163746 Malicious code in nudela-agfkafof-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791c6ecc63a9431ce1a4f419198cff15af69d5807f28bc354eef004ebf382199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168453 Malicious code in tealove-nanami24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e3aa7c104a7b58d0fe556cad27f16c5f6cb67d84a453bca407f828beec2a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151562 Malicious code in abu-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6aafa0feccfa4977e7dc786e0ec8f23112bbbe878e8ea02ffc10e61428e1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161966 Malicious code in nasrul-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41391786e1fc014205d2b7a8f406f9ed47e74cef3c3ae0d581b52b3aed8b7726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...