MAL-2025-158994 Malicious code in madan-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a77861083084df4fd4f0b0241882d5ac9d4c9b2b3d0cea278daefe1e8bab93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159086 Malicious code in mahnud-nofity-goniesfga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99839e1906aa31077bf299621787df07d53d3915e923fe3ce28fdc83cb93c9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164665 Malicious code in rino-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07efbad554bbee7cb8966118c993a5b20a073613f42488b60631a32f2d7c79e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151558 Malicious code in abu-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca9291b6a900069bef5ffc6a2e5bd5d7d4ee2b3ff2c29069f26526e4a0f3fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154150 Malicious code in dajouka-degta-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af7a3769797a10258f59fe0812e530e772a671ea0e82b947526f963624689747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158714 Malicious code in lookingan-namakita97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e39a13ca5c6911fae5ba1ea641549bd0b1a6bf1c1dd92c86431a987bf0c3ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155807 Malicious code in huda-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0b4b26b545ba7c70b4a25b6a570adcc44a48500533911835edc8dcfba932aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160595 Malicious code in modirai-fia-jinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de941c70417368ddebb38db6e20d6ed64c028fc881ff8d6ffc717d63769fc41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166456 Malicious code in sunderlan-uyilud-vanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e5b1e2edd9c0df89adbf588901143a412554a09bf3c919c2110865aaa3155d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155648 Malicious code in hafiz-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e33174fcea358e5f18673db64eeb056683b6c058a441178bf5eeaee07e03456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dddb6be2527e4f62a76892d38f40caf710789d1232d770df3e15b00f0a70fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165274 Malicious code in ruji-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bbd96a32367b24e585e4fe0277d7d16ab69a2e69350cd33af8fb9207f053bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163347 Malicious code in nokire-rara57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf8f0beca1ffebf9923357376989e012febbdf3d19e86080a75895ea613b82a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165073 Malicious code in rival-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f5ef861422b300bd8f750afaf0fdc851658f12ec6b868f37889ab3833971f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157424 Malicious code in kapagao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f6fd7a7cf5badcdeabe99fe3c086083e429a4e0f37dced2bd1e39656a02b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otogmian-djau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a497593406c726d8fe365fa2f954211b3dccfd5c9dde7e7e456b15971ee1ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d16c49f3f372a11e7d39ea2e78307d850bf3f3e07f5a498a60884dd06ea5554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aafbe9aa13d3f1ca3e77be4440142dbc4f2c269cdb3eadc767c1f0d6fd61777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18a39e8a5c4b636a71f08f42be72ab5501cc3db6d5749873a670b76ccd77656f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79efef2033d0cc5b27da3ea63ac33643fb4d76b600ae7ab90504d0acbf435192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...