MAL-2025-165096 Malicious code in riyanto-112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4205e4e25255c7f07eaa35fb6536af3382a2b396d7cf0cba2b0c66de2e881bad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168995 Malicious code in tehah-miss-br (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a09a93611d5e4e6ef96574356f2e84196488c2f846540f7932a60655201e81d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155736 Malicious code in hariyono-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9deeffc2f85b26a55a4b5bbcc928c4904bce711777b5392a6d28de6f1a81df0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150152 Malicious code in @mipta1/misadss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3147f02d01eb94eba69168cb2897842dcd0a8446f1a3d844441e39bbce56d3c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151547 Malicious code in abu-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4fbf0c9f59f6c6a6442a3a8ae034f9adfffe2502b8be0b5adf07f751a42c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155122 Malicious code in fitra-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25addd62faa859d289842a62b456cd13cca198fd3a481e101cf948d23aa9332f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162233 Malicious code in nokire-akaza21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b3ccc96086e76304f1f48ab9277c7d6e7e1c217aa3b4b303ad37a56b5af2b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163518 Malicious code in nokire-zabuza3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7768ee48cd27b55577ffca3080bee832b1c8ce2d93672c1b392e83b0f1465f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166191 Malicious code in suharta-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a07276543d0d09e4156be6b7a6be416e0c5f88f889b957010010d97b6444eafc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165740 Malicious code in samehadaku-tsses-sur7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b91c5177670e714a7ca9567c0864f8601d447a305c2dd3e355a3a4471ff579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166045 Malicious code in slamet-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01490d8978af02945321584af9065ffae92a771453b31657596722cea4dfe34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150624 Malicious code in @miptaa02/fgfdshj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae7a2670f5c985736d7ccf52d02e1f0b706d40d4545317344d2661f74509ee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162503 Malicious code in nokire-genji17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf515f59afe9e6f444a7df859b0a0b5ada5cf6b699be3a599f16af1f5ea9155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154974 Malicious code in fadila-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74578b3959db2540058a69f473a662480139e26f77e1527ac585cdc0040ccedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167615 Malicious code in teagood-nalikoli59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de845aa382a0b8ac5dc125fd18a8baac6dc3636c20bef0141ac40f7008e3ba6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154828 Malicious code in f-bendera-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6076e2836af6edbb4a2bf6805003104f5f4d67a0b00de8b383c3fc0b0500eb44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167004 Malicious code in teagood-lokina4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d382396a77d197ed55302fa4fe993cf5c5861663a0235ee522b651f34ddd3866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157997 Malicious code in layla-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704083e84127cc005bf97c0e36c99aee8c40133c913ff7259c0f2c45cb3bd578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163573 Malicious code in nokire-zabuza8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8994645f4ce12072c93be6494cb57d22bbd335f61533b5b3f72f640b9f004a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165356 Malicious code in sabua-muhayu-tadafaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a5278499598b22dbb21df300de57267874ff0644787bc2c9f1d5d4d6341d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...