MAL-2025-155657 Malicious code in hafiz-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c6fde9af61969af31c308441d1f36fb91f8dd7c3c35a0c0152d79fc3717ace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164586 Malicious code in putri-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17190d07a37bae36fadd3ce0a2ded6d375f2e1098b4c92109ee12e81215e01ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151701 Malicious code in aciaiaggu-idat-gfda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a85fa1a2ca01f9d125e041d2c5d9b083a7f5b90625ee8aadd10b0e4309beee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166716 Malicious code in teaa-reborn19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e6b7c9758059ffa9033943884af92da3f5b2026494491dc2848410aa5d0e885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165931 Malicious code in siregar-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392a666dd54efa39f6b9785e729ba8f9eec24f08c5b91ed647c259a184e7f9ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158915 Malicious code in lookingan-namalaka98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6759c9b0fe0f37d3e11f2585077e760426097fa440e17708d3a3e44bfcbc3868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151689 Malicious code in aciaiaggu-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de2eeab0271d5c5deb52efde8162c76b8fa93b252abafc7ced7e5276419529e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158220 Malicious code in lintang-tea59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40cf462e23df142d4f8877909e5cb504db2630ba22221f0ad6c70268546ac14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164581 Malicious code in putri-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdaf33a0a69049cd22c065d58104cc6b6e47b91edc782dc542f7ded5fe9e23eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153503 Malicious code in avomainah-fragas-ofafufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ecfe45829d10efcdd68650ac775a261c5f633d7773cfe16a385426d4605768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d04b471ea753cf19c0ce99b9e790c8ed82a3b5c583945ca8664e68b4c8c7d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164235 Malicious code in piluka-aluni-pibali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12431c763ee7097165061c42326706945ac5dcf81ded4aab33fc8f9d5530e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159000 Malicious code in madrid-niut-beligoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5759ad0deb6e5cc070fddbbc63ea28fc7dffd4d892d4a4b7b1b598a4f1df53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164874 Malicious code in rinto-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051df76847c08bf2ef35615d57f94a13fe1474baa4c281e664c359917253c0a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166158 Malicious code in suharta-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a99b66c6588f3471ffd284971223c8a45e1faf20500f48c12b7d3bd41a62d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155795 Malicious code in huda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c22def7c9da8701bce9b48ef0c8d03ff082fb3462958eb5255f0e08a0119c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016e62cdd627d158ec0cbb1e004f41982c15e9e2993e06678ce8ab50b44f7d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-adssdsea-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ac6a2592f4e70ede1a106a1bf7878eb9166e20ad8928c831d5da3698416ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-tdsasa-t9a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 983e38bfc8c93155ad38a2791fcd0b4c133887e3bb8fff046827e7db70ebe11b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167320 Malicious code in teagood-nakamala54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee4099f7a34f9a05f6456161d9a55567c2e671332c5ea48818c58e01d85d8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...