MAL-2025-154565 Malicious code in dian-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84f93557e66a9cf27329096f44c9c0ad32173eb894bd453565dd4dbed4770bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163754 Malicious code in nudela-fofgaf-gaf0hahsaaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb94b8d9f4f68ba8a29fd77c8013e58354c4f919cdd6e46aab05f3b573880f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153465 Malicious code in avoay-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f94cd7146e2cc475388ffe4ae7478b1796969347b0f26ca8522701cb2b9efd90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163947 Malicious code in pajero-cir19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643ac7c7c1be5c42d3877807760a62294ff2d4ef51247274d5105caf50126873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153066 Malicious code in avminah-fagiaas-fimokaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f52dd8b79aa5490724d9952aa90825f5026ddb0b9cb64cf467fcdcb854de6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155748 Malicious code in hariyono-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 827f13516d602ab30ec11d4582c390e63322118db955203cb5850da43699123b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155547 Malicious code in gurs-nuraa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e6a1b862945957008ba4b65233f8b334334838688a75634a0e38d1535757c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157562 Malicious code in kentung-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5b19feb7f30d351c3b397aec7c3f7a3ba07cd51d31b4b2b5262379988055fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150355 Malicious code in @mipta19/ddcddse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cde4b36b43830511678c4f3036110ddefe7da355d10c84ab2eb6d597adb1421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167656 Malicious code in teagood-nalikoli96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc0ed0c71d8a36fa060260e070dfcf5ff5b266a923d4d90cc9dc649ea1d51082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165131 Malicious code in riyanto-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65b62189aae1c054efbe58357e44570e281ee0acff1f16b1aa9aec72c7e66046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155975 Malicious code in ican-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf0efc59d9f9f26ae930978e5140b51f452e1935de4e0e5738393eaf916a5c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164914 Malicious code in rita-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da86b904cb74ccd9a69bb6d59a9256884424a6c8eafb669d38e73d9c6066e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164883 Malicious code in rita-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0849837434f4d3ec2dccccabd8fba069dd80647835037d8e83bd7525f8bc5190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157373 Malicious code in kamasada-nuyata-buad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b54034548d6144a32a867690ff5042a61725f3092ab3e0170b6202560c963b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170349 Malicious code in verify-ayai-auiogial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e63370d81579873094c9a9a720c7945a1a5cb10063c14b137a74943b35423b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168908 Malicious code in technical-alonbio-toli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ff8558c3aa01d54422862d8e610da5b40ec57f36455ee5fc58a455a5df3a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150512 Malicious code in @miptaa02/arhl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5115fc993f3306cfc668b25aa138c128dcc7202498753b112e37684ce7213f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151247 Malicious code in abiba-alvbai-ayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8cfe027f205b758d3dc91356e78cf915de68135452f8b1b4cb4bc5aa43af21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161217 Malicious code in nabila-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bfd2cc32f22e2000fb2fb17bd1c2a68ce2960b20296510eb9074c9221ebf93f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...