Malicious code in ananda-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 373c589d7548e96d53a79a2b9d44ea6f1b874bd3a5bf1c2e13d1251ff1d499f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e289c693a97a7b3984c3d8ab3ce3325af2918aa6d9f7876e1e5259c96ac4e00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc73eec9c506b9aa0ff35e129cc0a2d92be5add5397966b1a60c033ef3567de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137230

Malicious code in rindaman-poke5 npm...

MAL-2025-174620 Malicious code in hitachi-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d56ea2564e895cc8bb966113b086b57df39d52d897b2457fad5cc3217308453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136291

Malicious code in sumpel-poke1 npm...

Malicious code in sumpel-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eafbf55daefe19b5f9f9e98a22ebc4aaa4731b6535ddf0ef234207923f527dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141697

Malicious code in haritono-poke8 npm...

EUVD-2025-141581

Malicious code in hitachi-poke60 npm...

EUVD-2025-141272

Malicious code in irfan-poke11 npm...

Malicious code in hakim-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94248ba674d9408e389063ec627727c9a4052d24b32b3f58388644542bb69035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6763497b610d4b43d6a4abed8e0b43fd61018d776209c924cf5f2d399a2cc6ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141740

Malicious code in haritono-poke16 npm...

EUVD-2025-140792

Malicious code in keke-poke14 npm...

Malicious code in koko-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f99ad31ed4279b2b152f3f5307d8961ede4dbcb570c028125297fd41117916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137305

Malicious code in rindaman-poke14 npm...

MAL-2025-174532 Malicious code in hakim-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2381d00a7117cc3142bbe724c53b4998461f9de697ecc036a3080d60dbe3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fbb537cd353d1d34b4cc1a84720164bc8d511fc605eab0f8a6c31830fb3bf95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135006

Malicious code in zaskia-poke10 npm...

Malicious code in siregar-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4cb653756492e2c793f9e904f28c46598cf277d63799280ee5f229486514bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...