MAL-2025-164335 Malicious code in pitra-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc8895fb1c48e299c8f54deef4159d4154c74b0ebf610c6ba5c3b8fb0fce037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154922 Malicious code in fadila-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d9fb9be74ef2eee722c0c28e63cdae7422bb14c3a1b3ccd84b27cf971a3eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162780 Malicious code in nokire-lokcek27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c588ddfa3dfb2120daec0188c11ba2c83d26b2f2f0fe31d38a73572f22e9ea59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160630 Malicious code in modirai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49fdfe217650eba4a4168b8bc605b0f815140ebc90e1fa41fa0ea0738ccf2cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161920 Malicious code in nasrul-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2554bf4710bb081ccd04a87ef3a1aa743e4167d71205dd71d40f69f6af0f87eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159519 Malicious code in manaf-assssin-muaanst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a001bb612f9338e505377a33b9f3bd5c6d1479d44c04b4381bbcfb95f18a2e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158078 Malicious code in layla-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41da46082f5805d04c6e714f63158627c48d3f21e135feb960c0a28997f3e840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-technical-bisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6eec2766ab6b56ea02aff183e67137cb626df3df8958bf17be93991b153af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53cd4a233b6da00c404d30aad0c7a69337c132d083bd6fd61e10f448712eecd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430e291b17b0deb6a10c7696d83874ffe6c598966f1760deff03865883dd0a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3730ff873ec4abb1c671754e0191c926e8c106fe67eee8e5b70c8168cef6dc26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4927963b3c52c97d901e87778208a98ee9b6fae25d65d5a8e439b09722f5bb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulp-kaboloki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10081f12a3739b7ef59fea47217f68dc3469266d228809c6d7847bb0f1bb9d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoi-kinatmumolagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d6dae45ff6a86e6a2414886cf33b62fb2aee333fc03dd78ad919a0dcffd476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce1d3b9807426b43a649df1c5a5e5818611a602d39dd27c0820a0e9944c05e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1dec0a0169bc1d93ce4f852c39e899106f8aa02142cea27eb852e7e2ab1a482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa98c0fc819722aac5c0725d77bfcc83521ffccc42fbeccd54a9c2a68049f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotamaiva-jamanana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8811d5ce0480be8dc2955438bd0e697f032aaaee34aea695bdb732e9c7ba95d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aimaku-umuialakdaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7423d1e138198e591d200f71dde67ce36c2f2b21d8df22d2aeb00fc8d7d713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke151 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1e863812009a74e9569d88f4581d56514644211eb4abf7428c36ad711a78f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...