MAL-2025-152464 Malicious code in alvira-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db9af59c91740dd75934424d4112a6dbf97155ebf02517f3f9318725b222c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152309 Malicious code in alfiansyah-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c538b32c0c1da52084b3f562460f0b354ab80d7516ab4427343adad64f383455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156181 Malicious code in ilal-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335df4eeb3895c8cb4fac8362e9e489f998b706c832a99246c81bb259c32f471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152909 Malicious code in astia-al1f-dareagauahaso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3bc8b13ecd003651c5f6a7a78a0d8ce09c4936625e27cf844e9fde47648d371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154811 Malicious code in ewa-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18996625eaea5a66117e7beebe129a5473ce87012add369719563fc0db40c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161268 Malicious code in nabila-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b875a15022be94142501a10ce663ad04fbd6dafde65e824dce5ec5e8d76cbcb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164165 Malicious code in pilka-lniu-kan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a164b3fc582daff60e5f37a1783a64bd147ce5ff27a28680436c34b86be6d5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155911 Malicious code in ican-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f03a0352150487bb27c879e0b6f090188855e8bc00b8d4257158885e957ed565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165329 Malicious code in sabua-muhay-ntufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b973602a914b6eb8efb674d79f9b00870d7e36494205d1c6b640d81cc55083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167996 Malicious code in teagood-yakuza39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2132dba51aa3d0839a3eed62d2c2e93bcd2c57fab847e0cf917624415ca53e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158617 Malicious code in lookingan-namakita10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abe351d0fb05eb63c236c40b3ed4d7b65315a49799c6dc933556f9dad6f3477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154906 Malicious code in fadila-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800445cedf550218aa316a94bb80e498274ac4d3640bed7b0b82524318dd1315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152539 Malicious code in alvito-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31074e9ed7e6fd80ed3d11fef19b14cdee3d884501ed3e3398a86e6de561b077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160984 Malicious code in munya-mipta-munio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5397778ad97d081aea686981cc0bf2748513f05f011c2db961cfe2db2c3a713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155553 Malicious code in gurs-nurazssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0755738e42217653dfb9bfc9587e07c31837775e3f991e176b69f3d9faa70c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166143 Malicious code in suharta-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afde26f4ea986bb9b04b87724db7fcb5d8327ec04dbd6bc9379fdc9923349161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154719 Malicious code in dioalgo-kilp-akiualabnnuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7539f98dedd8d893d5474a08db19e0d9cedde3933f0e722b21192da88006ed1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167265 Malicious code in teagood-nakama95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4790a4e6b092928c158baf7df4bce004c32b97ebf7c7fea76e161a9719f9c243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160763 Malicious code in muda-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9db90610c42f52b3baabf89f3ad02b5ac6e80d25d2cca85f15c5521e66ea27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163523 Malicious code in nokire-zabuza34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe1e9c5185b79b1f20a1ab975ca47d9e69fcb372cc4eb0eff9484a8db1ef72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...