MAL-2025-156120 Malicious code in ilal-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445e193733809ce658d21380c60e61ba5999aad1642a430c5c0f94fa27136c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151100 Malicious code in abang-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465c66d4832576a1134959da896475f4085c4c92e0ef7253bfc1b6c87bed3ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152726 Malicious code in arif-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3a822a400fab22a687271d5adc854e71bdbe6659b5e9722533a5fb00a1bf250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155109 Malicious code in fitra-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614facafc357a4df5d3932c2aab6b5a7660b7d7496700597ec3d654e72a4d3d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169638 Malicious code in ucok-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6031120ee2744e4f353cf279eed6c30f127a29ae1bfa92722b63830c917b75f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce7fb01fc68d62d8c1220251966e75bd1ebec0c3db9e62b37dd42a45b707a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147152

Malicious code in ucok-poke4 npm...

MAL-2025-157991 Malicious code in layla-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964f9dcaf659c4f92c7fd73f123dd632cecd30660911a9e24bea92a1624e97cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151321 Malicious code in abih-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb2b5ea41ca672feeb2c29fa69c27e9ec09052fcaa01504ee20411aa25c8e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156842 Malicious code in iqbal-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc9c05b90d3230f5f3a1780bbb0a409b9123814bb44b9ed3e98f1bf865bf6ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161211 Malicious code in nabila-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a47d6f94eced05c40f45a65e99d584e3d93db92e91f232283c04c55ec3d3fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155153 Malicious code in fitra-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a310861ad04921a32ac5bfd45bec205b18bc71861950a875637e27fa15f81322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152018 Malicious code in air-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb8b149d005c44ba6b8e380a212562249d0004f02a0c5421bb8ec89a91ce739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164636 Malicious code in ramadan-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25d5df4b674dab1d97e76d8dd5c82f96f1e677f283a30f5fce3075c9dc2be561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165033 Malicious code in rival-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7defc4f96e63f5331ffb36c524f682defbc229f7096a21db2b45267f355d262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ec54c14dce5c425a195ddee454edde81c2afe1f460dd4e8e13fd7e1dd889d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501404350e8b451d157c554fbc20bf6a81f2632b56cb620408eafa1132762a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe587faefe2b95e93a600d9ae95b73b51f6ca9e5a258d13f98a1138eb8e81a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ea5a411b3392cda3ddb00d8d4f3b764f895b435925719351d061b304cf2066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8f726776c700fb192d3c1203a3662c0a7902040d0f394f71971792fe06480f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...