MAL-2025-165830 Malicious code in shilang-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0459648054322e1e7e43f44b4db7520db5ae9fecbcec3d4760a418c5e5769218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167344 Malicious code in teagood-nakamala76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c9ecb4d83b20f1ce67edc69660eabe036c7815e4cd8800fa4c8409e6aa586d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169834 Malicious code in uinsu-lisa-atukbmnma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3296431cd283e460fe5aa64b2d6298e06076423ddff9c594ea169a72e45a4463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162520 Malicious code in nokire-genji32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fef5a8b43204c075ec730b7fddac7b2a0535ec08bcefcdc7fb27330175f084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162701 Malicious code in nokire-kore15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f655115cf27ea01ba6a965a467c6a27dbbf0d901d2ff476ae3a18deef52177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163918 Malicious code in nutr-madan-syahmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90eeef16a854644257ca7d89d552cd818897d119f8c2548e58520e795d2b3f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165018 Malicious code in rival-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16820e333b8941ae3eb9123610e4b6c3c03c915fb73fc87492cecda16219c027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152775 Malicious code in arif-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a50bde25151888c2283d987b6c00a798a5da072e010b2222ddd97c58c84be3d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150596 Malicious code in @miptaa02/ewas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11297cba1026799f7b2a2eb6d8b3a09343a6aecae250440026eb73fcdc82e19c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167774 Malicious code in teagood-sukuna21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e275fc86977305d723cc13ef33371738a0ae8c813feeedd0caab7e176f4b4505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163763 Malicious code in nudela-gagaafhf-gafsafoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf6c26804690b61361d33988fc2406fe0677b0a8831b162751b513197e920fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153254 Malicious code in avminah-fagnimas-ofisugogafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97e287ab46b5271854926aa69d402b7bcc7024729f974539820d4616f6591e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158556 Malicious code in lookingan-namakiki45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a5dde755a09a06d2ba9c2d55da2dbe9068e9b6921e96f9708f6e4c93f5f244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152183 Malicious code in akanabi-aibia-ufibau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1bb6726e57acf5995273423d24ae58d42fa48d9e21c61dd62b900567fb051fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166470 Malicious code in sunderlan-uylud-vamuiubknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d487a31f6db107c438f02d84dfb9c1cf0394e80decdb786c5734b63a044738e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150971 Malicious code in @miptaa02/teddy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4027e20c3a3e3400685db9a6414269628e6cc61cfa138cbc97dcaa336daf0df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160204 Malicious code in masiolan-of-doiubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c506df1d99c554cfa66a31f872fdb458f4f147d916fe220ea804dae1b48ea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168206 Malicious code in tealove-coki48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 294a5da5853861b20f24c3df1870673efb9f8003adfd4047209aa38e3400a675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155336 Malicious code in goodmanmax9250-forget-grow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1414d8718d25bf5ad9c278743476087f2d3560c4437f83991256453a1f7bc41f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162887 Malicious code in nokire-loklok34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9ea569a6f69e9fed282a09410a87aa6f7acff735e3182f07d9dd379cfb2c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...