MAL-2025-165128 Malicious code in riyanto-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccf30b97135b10b0f6702bb288e356e855be1df2f14c4b3e8c40a1aa46449d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufani-muyau-fafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e7463eab4f4da74990a9fa849ed3787fd7ef5b4b72a8050cf853c1c999ad72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-ntai-ksdyasaedi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a0b2bb0e30687a7dc48d7a0e32115d846a38402a912d63e2543393c2910076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154095 Malicious code in cinta-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972d7a6c0351c2383e0a6b64bcf1428f41cf5e45263c83c69e8ca546921420ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0054b34cc3f46a5ca3822ff49c5bb8f9488f3e4609788df8c1eda134965bbd6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ff435c2d8ba0b30129d29df0e61bcfb1ca7862f793ae33a01c862adb7d7921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165472 Malicious code in sabua-muyaig-budauafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c867efe7324685862ad50ee3edff9da30704ad7f2fab96ac8f2b80e25bd3b99b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160998 Malicious code in mursai-nudty-ssda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27f288af5a14626a84876f61d0a1f9e2c03d78c1918e11fc2756acad11add7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162954 Malicious code in nokire-loklok95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f5d68df0721388f8e3054de3b51e805440682ce543447d6cd858f0b4f0ee49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150720 Malicious code in @miptaa02/idd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df6d8c2013e24e3a393c6442f566c084224643cc946955cb52be95058f0da9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in turisna-sfpsa-dreaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea260979ff34e38a7b895b4f90c09a7746231be528628bbc79f0017bd4fd642 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155184 Malicious code in fitrok-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0f2828b2060d9f429baf538724e41ebbbc21edef629f7f92b16ae6fd71666f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168759 Malicious code in tealoveness32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3993113e0c737d10cdcca1bfa140733fbbbeed2e8c95e4663eba0aef42113ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155883 Malicious code in ican-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a16d6dddc5e49d2014983e29912d9812a83aa7c3f05b65f21bb25ab23f17c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161540 Malicious code in nabuf-otmbian-ifonabogof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56939cfa881e421055e41d897b8c0131c604aa58c25190fdd88bedd7e9a12d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157620 Malicious code in keyla-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e48ea330732be1cc4dbc2553a93cbf5d6667d8105a56bf6969bc7770ea66c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166039 Malicious code in slamet-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c472a364f8708d96f79fbd942c5cffa3b16d438c83d20f0af3f6cd1bdcf7d91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154188 Malicious code in dajouka-slas-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf12e201d68c30872e143f1bc118d39fae77f4184300466777a2680fe89a14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165007 Malicious code in rival-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d50c18a29130728b06e4b2c64291cbda6e83d6708b8dafddd2754f6615f6f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169676 Malicious code in ucok-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48239d5501ccd47874a4d9b21adac67494c96d2e4fb7bbb3a3353f2eb37b4fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...