MAL-2025-161890 Malicious code in nasrul-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f2923d0a60833ec4eaa4704329d3bef8676e8f2b18847f3fd287f10d5950e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163477 Malicious code in nokire-sekiya83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0480c483d0f421ca07f6153672ecf60ed2798ef1fefa91354da233522c4aac33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152705 Malicious code in angin-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0374d127ce99b81ea07492ea66fc73f61c06444bed183b887f7cc49e60af1066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152600 Malicious code in anaisilaa-pafonolai-asigoga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387903c9e0fde2ce8deaf7b7372166044ab1b94bb52c8220ba990ac4cda75da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155652 Malicious code in hafiz-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c026f1ea7bd9d829c4161e305da4869e38714e11060a85267b5985f94b1955ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163795 Malicious code in nudela-ofgaf-gafjaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e4c56f65bc171cb06e7f3a28e6120908a6795ce6e446557ca24ed005df22c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168180 Malicious code in tealove-coki24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e71c24730ec409885699f2a084b72070457ad81397138c0163844d00d3a18ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150526 Malicious code in @miptaa02/asdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1034e7e1d0f2bcd82340ffd6f09e731136c5d495fa624bd2575e4db2e452c382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164826 Malicious code in rinto-poke523 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbebfdb842fdb2055362786d4136e41c1a1386b489d2d3f4d04ce77aec5f2fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164069 Malicious code in parwo-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4da0e380ee08f570b8c8448442c68e759df7414e04f1bc20053e240b323d489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166050 Malicious code in slamet-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b887b9f05c1978cf6589440bc59a374619d4da4a7ba9b4c4a6b00ea2ac4d3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169678 Malicious code in ucok-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9bf726661676446a6e618b63e16b90c236aadf50b738de022fc37841453672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151152 Malicious code in abel-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78d2e51ff5ab98bab7d2f995eaf659f99d0bb5b1132263ebcaf77a90d7394a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158654 Malicious code in lookingan-namakita43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110309d840a4fc106b3a239baea93d088609fd896f08b029f1faf3d899f7beb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safadia-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b493f74dcb9c3fdb730c73ac03c1424b7c863470f9ca8a180179a3b1ba3d54e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b792cac3eba387343f6549f8fcad2eb430b5a75eee2b19122ee876247b8c0284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molpie-arai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f5fdbcd134ac0b403b03647d9b7ec6bce44ff9352eaf74291609c0484f086a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d567edab5903fa30743b8546d51dbfd63198b607be0c96ea8231cef2541793c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abih-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d5b58b1ce29e68aa7c114b12f8d31d9300a81dba3c80d3a64c8ed8dacae599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b826ac53185e6b712a0b3585d3f25a8d6c92e4936ddcf2e0fe7c37b485c51da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...