MAL-2025-155760 Malicious code in hariyono-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d622aa7188d73f8473817d297325ed2392eea82ea806bbb241d07b2f49159d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152241 Malicious code in alfiansyah-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5ec0b2d7d9ac16b7dc37119dd35246e841555c03b1a66058dadb0f79fc93d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154233 Malicious code in dajouka-trusra-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1dad53e066cd92362abac2a7ffb279993be1816bf8aa38ec812bdd90c1012ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158724 Malicious code in lookingan-namala15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a725a19fbd587a1b065fbe72f1b3a2c3f7e0d8d9835c4f37d25d388390ed226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156496 Malicious code in infi-gafob-jagitga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69295d84d226a8383c8fb59e7f24a8ebc4fb78d38a85a277cbd496c3f76a9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150305 Malicious code in @mipta1/xfsizzx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b8c695f6a037a9df1686a1b4a34f9ed5fef674ac8e8b98b5de400e4ad5a849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159233 Malicious code in makan-amoa-iuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac47cae83d7cd2097770953c516e2aca49df923e82c512ab18617e8f001e355e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159390 Malicious code in manadsi-safifda-nasidasop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ec769101ebd54ee9a0ab281d70be2df5ddffdd0bfaa4118de6bd545e8e1da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155430 Malicious code in guras-nutra-dasssaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8344f3a0ba2bab95862b6a7dc987925dcf466fa77e16cd6f0091a0a8942335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162829 Malicious code in nokire-lokcek71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973ad66c72b2d2f0884ce219543b3094c185706b9f89b846b40178b7ebe4b7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163575 Malicious code in nokire-zabuza81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c33cbf0db6823dde3cf150a556029aaca54cb6274b3e829168ccd87764a762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152376 Malicious code in alita-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d8cb415430db290e64da4f9adbac0436841ede314f7e208e51b1921fe99330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165846 Malicious code in shilang-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb85466fcb15757c3797c52adf9ba57bd8a3ac968d432091fc8108cf7b1749c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159730 Malicious code in mansia-tavil-madoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac5d1c82c90bea384d87d8d42b67a899ee5e6d740a38115274c0a0a733b0233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165384 Malicious code in sabua-muhuyu-tadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30844e2d8b1d817380431fada0c1360c63a3517394c0c6b31347886ae199b91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159558 Malicious code in manapf-manta-n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae27cfe35ce96acded3adacdabbeae9151f42680acf66d07563d5f34c285905f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154281 Malicious code in demdadf-sadudar-adudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc43d44b5cebdfb785378ca653413883c4a6dbebd44e4163ea92436cc8b2d006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156490 Malicious code in inal-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c5db6e5cb2f730bb7cdfc75615b63cdb8365cc18ef6ba8e4c65f27e231a6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154934 Malicious code in fadila-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb242031d67b7382d47daebc158eb4da99ccd2cff28ae889d81389cc68b6b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150308 Malicious code in @mipta1/yaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d53c7109b05bb9d42077fae18ca8f2c9d28d332f8c0ef41573963666de3dc4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...