MAL-2025-158150 Malicious code in lina-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1abf74803326fedb4c1484554d9cbe73e4ad01525bad4ed3abfb00270b1516c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152525 Malicious code in alvira-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3bd7c630097e0dd14f8bfe908884975c75c66a45f666ec337e6929a8f8ad48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154843 Malicious code in fadila-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 371c2105834b417078a35fb5104c90623ad7c9b892508ff0e203a6269ed45cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166005 Malicious code in slamet-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba1c01075ddbea36373ff1a2219f1055cdfa7537212916f34c2b41e808fd683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150009 Malicious code in @mipta1/ersisus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c95f24e1ebc2262be2083b7ba6b758ada6c9c312157c197437f9c5c8fbdabfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157242 Malicious code in kamasada-buyada-butania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d965392c7a9eaa791d302ee3d2eac674a4093e8542a8e5af874304cd1f44760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161905 Malicious code in nasrul-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f432529ab4dc835f3f3e554def519e7ce2eb6744f10595e65d8f272f791e8bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154781 Malicious code in ewa-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a686f235c798c3b253b65ca17e5c789c58a880fa31dd15360ac6784bb14aa6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152311 Malicious code in alfiansyah-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c310a3262bf96f6db34eeacd45ea5ad4ce1c6831713f89c34239d8d931a907e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166181 Malicious code in suharta-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d03c89c96dcea94305c4951ba836fd5695b0ff9e7e1a748a0cac07ad1ed08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161205 Malicious code in nabila-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc91cc8a98e7f40cb57db2390182e0eaecbdccae059390866aa5c099cc33a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169349 Malicious code in turisna-sfpsa-derueaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c914eb5ee678590551fb91abc6aa59d319b6c7fe9ef208e79dae348dcf83263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168178 Malicious code in tealove-coki22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7124bfd69f3dddea81305aa12418ce543b57ed65d9c1a7c017a3b113dcb78fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169186 Malicious code in trevora-cir131 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6451cf979834e9ae00cb79cdf882f6f730b3431b7475ef37a18c53fc1f811f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162834 Malicious code in nokire-lokcek77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8882f99c22d3e64007da5d235dcb77a55768ee0d516f65167be87148b85a471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157502 Malicious code in kentung-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc101ec4663e68ef24107519592ea234a3b5b21991e4aff4f3c177265fc0273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162617 Malicious code in nokire-kilua3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf67d25e00eea7c245b9b053f110a8febf3c7deb5f8a5a85f87db532b4b18df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151602 Malicious code in abuibanua-mobiman-arayta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e7afe2d1e8e95f8c3bad40987f32f7299f6abaa37bede9656b98d7b21af5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150166 Malicious code in @mipta1/nhida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8529c92494ea971aad6653c19b801f9026ab88da1b4c546d913b2f7122c00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152070 Malicious code in aji-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db5535e4375c638750eee92e0b3a7c5b6269d3933f115a54d2ff7fa6140eafe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...