MAL-2025-151204 Malicious code in aben-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e684c3082361f9a7cf3a52c4003d877f281f582469b427ac940d63b497cb41c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156914 Malicious code in irassdhi-11-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91cbb29c4c02a6bbc9db056b59e4e7317bd6bbc604403d22a067c65c3c60c7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokiragne-asiaifhafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe84c57e02f352e9beff8f7de46597508d76840264242b93a36718d25a636f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167514 Malicious code in teagood-nalikoli106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe55e6abf772e9995a380eb80897ac8beb5117907afaaf474d59ee2a8f8ce7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163794 Malicious code in nudela-ofgaf-gafjaaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de19fced31d8aeff4175171fcfadf8e9738d52f22af0cd68b018a5d00592ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157685 Malicious code in kuinsnu-lki-kagbdsasodasdfdgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5138e292515ef23e57eafbc4ee48193ab67ca35d522c199f3171e4f74d3b5a7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155875 Malicious code in ican-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fb9b958f356b28bb57ecf6cd03b8b55f3936343b1ef3c06a7b67e9dfb8c0de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166857 Malicious code in teagood-cuekin88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74237f989587e2e14a74dd87c3ee2e71d546243f0f32981029cb5befb9e34397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162907 Malicious code in nokire-loklok52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430e291b17b0deb6a10c7696d83874ffe6c598966f1760deff03865883dd0a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3678365b23d2515c119b98f4b290b78a88f21c085a76dee373e5338475f0e70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161536 Malicious code in nabuf-otmbian-ifbogof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273b8737ca0ad22d51cebcb0898800c8e55b5633315d0ed26562bcfc3e1699fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151032 Malicious code in @miptaa02/wih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49c009769966122fd0b8591f27a4fa2ce1767860701de5377f7974f55190e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158255 Malicious code in lintang-tea90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb45749304959f7d23a935352f96b8a0ceb3d1f5e171a6ff54cf3e45ac110ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165239 Malicious code in ruji-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5abb35592893e96a61aff0e81f73d791acc46e2e06ef7283f28e7b2bdad2a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/dadfdia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7430ec45b72a6f4675d945029820d2d7b1e0738f7752c19650f55d7190b00e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155900 Malicious code in ican-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bff3d3ae7cc9acba1782d8ce836464dfbfdf25e260114f7da8c9a36ab7d4350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fhuia-jasatyfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcfef6a3c1a3463464dc8ea2866aa024487c76f7a4bb672155fdf22a72e29db9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152286 Malicious code in alfiansyah-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8779776dfd7e86989a08eabfed8fc334606a422ddc419b565815244f29f19235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157670 Malicious code in keyla-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dddb6be2527e4f62a76892d38f40caf710789d1232d770df3e15b00f0a70fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d43c32b98a93faba14e0faed30e8d5189d585db32d06a6c5276e7398171980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...