MAL-2025-155622 Malicious code in hafiz-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867b159884945503eff4afe53c9b961de1a83eab3d0c55a449ff10535902433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168131 Malicious code in tealove-boy25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c6700d34c00727b3cc85bf9bf0fcc32820a884c65463064a9213c5a48d1dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163832 Malicious code in nudela-rahfaeg-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31c9be2e202a4155245e0b9710faed303c54aaeac729623c8963409796e82600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166103 Malicious code in slamet-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1d3becf0787901795be260c2507d5ac617c0d6c5ab5428f5b9676a40754ce3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169672 Malicious code in ucok-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b239a07533e4ea401fa1b6021b8aebf441fc45901be06c529bb14b89483ec6b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151102 Malicious code in abang-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c578f5c758411fc3b64f2dc3b7ce29b7034a67ab0eb5847110c9cb5669cf3ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161236 Malicious code in nabila-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e5d716524bc5a00d481decfda01aa1ba8b03ba79c7aa7d194eb5cbc722ace1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162884 Malicious code in nokire-loklok31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b859dfd320a3a84d598448d8f027307ce1aa36ed8d2a840a4cc59732f7cd1906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160941 Malicious code in munir-terd-tsduyn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bee94296aa97fd9c6f23637944991d5bcfc7c12aa6487bcde52b6ec2a366d18e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155017 Malicious code in fatidra-nutayua-tartuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2992bfb64ab3ad13245236ea23312541c7abbf3728a80ed36f5039a59bcc0285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165498 Malicious code in sabub-nalii-iyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcdb89ad19b7fb104ac7b5c9157ed5723d4a509a7dc3f9aca0f012aa18257dc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155496 Malicious code in guras-visa-malays (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22b0d00ddfa61e09c6793366d9edb7068a5df36a1a5c8596fc368d846a67f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149980 Malicious code in @mipta1/dgiamna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74add7fc75e501197c228918d6aa84d3b262dc82096b87415089defa69316cf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163464 Malicious code in nokire-sekiya71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6eda7cf3c9ae4dddc57d0f26934f97d562c061c7209899e3535491cddfcc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169075 Malicious code in tehasdnah-muaido-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50dd5d8c9633c09e4e38f58c11aabd9e3ea6559ac6437e7c9f37047b7b7799f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158809 Malicious code in lookingan-namala92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c77a333dcd8a67a25288b08b68edf6b8aaafcaf565252d70fc9facb071e9f2aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160416 Malicious code in miftaiky-wonder-highway (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19340ef84a98072d4b86fd0f6c26b8f697d450bf43520ddf43b1c5a7e3727366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165970 Malicious code in siregar-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddce0b72d80459ca9fd7933200cb18a12c35e5dd7bacd9c4940c6d0f627d3a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164360 Malicious code in poli-akilu-lunina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3636b9252883f98533d036e4760b3fa8ee64dc02d82510c32a9d7f518d8e19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160558 Malicious code in miracle-dokoi-ikawaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb086bc0c92fccca3783bb960fecfc4c6f5e9b2f50f5566b8250a61cc089001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...