Malicious code in fadila-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e8f0b07dfe94ab1786f52bb1aebb34946dd704fe61869a78fb26fab37771a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165047 Malicious code in rival-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da03511e217c945a1d6b37423ed89efbe84e99d400f8bcbdc64854d246dec5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12838fa6e4d9984d60669ffbdc8fe58042bcfc1b63f7f5a892a0bdb4d358f7f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-150317

Malicious code in syahlan-poke1 npm...

EUVD-2025-150161

Malicious code in syahmuda-poke6 npm...

Malicious code in rinto-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fdb2ae2a5627984277997fb44e20d2821797c16c87acdcc66eb899154bd740a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367469bbbce07290d65898a50ed7692ad4c603e3d3df7ff0b6817a63e1ee3fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b234188b3c0c91039e204068891cca9197efc1ca1dd8e2c73ac112c95139b3f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb1caf2bbb75d4495cb4a59950ca317f1458bda4c9f19b14c03c7c0dd89f0b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b17e6bf9d7d799ff307ae3c62411d5ebd09b376c1cd04a7ba61fed72df919c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ecdda2809b83c746bdfdc0d0104497c33716adff19908380478b0ff80d11a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac52e925efc3417f90dce7f480a75cd1136bf682f6042813904c84ffdf810f0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164a28cbf96ef3fe2c0d61c25e899e0a391f55aa140b112d3b12e04abd06a382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521bbccda9207173a05551016ea24e45fb11aeaa709f5f218c7fda9e9635967f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa29552954c3331faaedc4484d79275d9e4d74b4d21fb871af1deb074c660e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155833 Malicious code in huda-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9037768b52fad01882827788724723884a4a0a97591b71184ee9b2dd037fee92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165980 Malicious code in siregar-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25741af88aa1e88589cc0afb37f17f5f986ccffa45c0eb55941395e5c6ae462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155903 Malicious code in ican-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9e678297ad648fa98255690310d05c74332787ffae69c627747f7810887cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155725 Malicious code in hariyono-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385675710dde9d5a43a1a5432a83a27dab52db2d7b97be6468bb2ef0c85aafe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4cb653756492e2c793f9e904f28c46598cf277d63799280ee5f229486514bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...