MAL-2025-158992 Malicious code in madan-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f973dec5c14b4f1d0f909445396b6fba46de816b4277c4734e968c6db7f8841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158782 Malicious code in lookingan-namala68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b183d054c1aaebb3064affbd475b26ea7fc1bc09fb33959933e31f5127cd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164335 Malicious code in pitra-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc8895fb1c48e299c8f54deef4159d4154c74b0ebf610c6ba5c3b8fb0fce037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165658 Malicious code in saku-aiu-unianuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 736021a08efdb61ddb4ee45027464a283d33492f8e305bbd2c2cf14fc47c00db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162954 Malicious code in nokire-loklok95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f5d68df0721388f8e3054de3b51e805440682ce543447d6cd858f0b4f0ee49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161920 Malicious code in nasrul-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2554bf4710bb081ccd04a87ef3a1aa743e4167d71205dd71d40f69f6af0f87eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154806 Malicious code in ewa-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e83b1db4b145eb47d1428ed07063e044cc4160ee81931063731e4129c450a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168046 Malicious code in teagood-yakuza84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e9d2425937fb74c382f1be834a8cf00657a063ca11dc1ae0372d93ca02c624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d30787c3d3baeb67d67a1eef0557b52ede683b96c40be81c05662e284fd4bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoi-kinatmumolagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d6dae45ff6a86e6a2414886cf33b62fb2aee333fc03dd78ad919a0dcffd476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45efbf7f325c41d25794872b80035626ddb7d5e3a41363b143297b30204f57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60fa45f766783da72d01780566f4e7fa0941e9ff6bd5ebee617b4bd306f3dc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ab23f0e69db76fdcdead4890a76a74a1853ef6b25c5fb5b87a6c70b4935e5e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b807f9fd61e2cb3e4d917ec078a39f743cb44d7869d9a43ad6a2313f506e780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa98c0fc819722aac5c0725d77bfcc83521ffccc42fbeccd54a9c2a68049f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1dec0a0169bc1d93ce4f852c39e899106f8aa02142cea27eb852e7e2ab1a482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguof-dusui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cbec3e9e363edf830cff77f8b0fe40340aa7e6d8c97884519f109ec0e80f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265a3ba2a926350281bcfac9015ae95f6d67c9788f16ba49a0b6fd8e413bf6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-maranefufu-safari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a04b49582024a8a6902b666c8b5537d9a4fe41f39a35fb5434389ca2cfc8bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3730ff873ec4abb1c671754e0191c926e8c106fe67eee8e5b70c8168cef6dc26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...