MAL-2025-155722 Malicious code in hariyono-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a811bda597ef572912a6a8882c2fc79ccbae68b60aa392b16538278c66de1d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166748 Malicious code in teaa-reborn50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c0beae572cc2ca68324e293529040331be099794573f0dd06b97bc2ea0b81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158094 Malicious code in lina-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ccffa35cff5daea1f59412c8e4f7b11214074dda8a11ae5c651779092d9aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150735 Malicious code in @miptaa02/ikadashi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e0f88acd4b300d8859486b515a28937bc377ddf627c5d3abc912fffdb62a1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151562 Malicious code in abu-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6aafa0feccfa4977e7dc786e0ec8f23112bbbe878e8ea02ffc10e61428e1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169410 Malicious code in tusya-fass-ss3a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf4d912265b21a996d38855b25d19215d42547bba4df342b50854af27f10a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151759 Malicious code in aciyua-idusut-dajar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b99b5760a8ec204b4766d30eec0a972ce35b61ac27082500b87c82d63c9f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162837 Malicious code in nokire-lokcek8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdf0833e813e16d6b8ff5d2ae675299b748a235a6e4a4c9a7fba7a4d171e09b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168561 Malicious code in tealove-nokire32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f03648c45cca73b466331be9fedf58c3cf77f65eb57fd31b414c83b092e57342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160419 Malicious code in milaoa-dudio-muiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856e4ad176448e65a5f0eeb8abd9979e06d69911dfdc92e010e011bac90a7cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167289 Malicious code in teagood-nakamala26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ca1fd4112bb67b15b51fdc62d5cf380e5c9d2420939ff99574fe2e501b38e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152565 Malicious code in alvito-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d835717743f3c0166dee573be9dbac1031311720c193401d961184dbc44e161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167669 Malicious code in teagood-namakai17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed41d2f418ac1c193ef3fc63ef88125b961d55603e8796abc897666b6426e931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158345 Malicious code in lookingan-konami80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7bfee52b97b3eb63e913e68b411394996e88caeab6275479a7e9444b1094a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164541 Malicious code in prayoga-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd01fc66abb1fb29110b3a98392272f05909f5ca00a311d8c254db49feb597b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169291 Malicious code in trevora-cir91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2052cf14a141b39d0293265897296079b439f2d8cfa4058d63c629d66c223125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163367 Malicious code in nokire-rara75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc21531eea3fe7bfdf1a225326a0fb48e0da0c2dfb45ffd7066c8527eb02ba1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154972 Malicious code in fadila-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f7c41242bc81e00b0321092c34a3f77eaffcc9914ef739ce1dc22b14372b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158011 Malicious code in layla-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d516434544eebe424b3aa2b2a16c04ac6cede44c80dba53efb33a8cc0bccbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163394 Malicious code in nokire-sekiya07 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4401b2110e36293e76072ab409cd23bca6ffd0e49975d8a1fc62beef764b64aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...