MAL-2025-169636 Malicious code in ucok-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae8a31c425a95d148a0cb661d598cbcbefc4d6b4af9fcb2dc7ecd40af732079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158078 Malicious code in layla-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41da46082f5805d04c6e714f63158627c48d3f21e135feb960c0a28997f3e840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153519 Malicious code in avomainah-fragis-ouda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61af3ab52b99b181963a589f178cbf924d3e9610e93e1e6d628528b6496b0a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160736 Malicious code in monadi-nads-ka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57aad40cb840687e091c482bf1f66aa81d3ba5c84e3697f51e7deb97027b5d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152482 Malicious code in alvira-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8ad5ca215f4b2a667cc4dab0088d9e09f2871dbc2c69dd19e194a1bbeaf9e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156011 Malicious code in icha-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d58f6d02e5dc7eb2e6e6c2caffea488c27fc26bf0bf95ad30b19753ba18e5c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161920 Malicious code in nasrul-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2554bf4710bb081ccd04a87ef3a1aa743e4167d71205dd71d40f69f6af0f87eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160955 Malicious code in munisdr-nserf-sarssafd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a52c6a5b6269f9d68b00b5ad7a6d46c8b222a361e9cb88c3221969b7fc3f81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169203 Malicious code in trevora-cir147 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cc225376397d38cc42811187cdb5754bfa954fee0ec345b394e70c7d5f2836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152784 Malicious code in arif-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db57b5739b4d4de35b4ac69bbab350014d0d603192d30a6bbc53436937cc157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166039 Malicious code in slamet-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c472a364f8708d96f79fbd942c5cffa3b16d438c83d20f0af3f6cd1bdcf7d91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158412 Malicious code in lookingan-nakomi6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f5699869d677ea81687e769c7b26e48549e940d76e2463fb93ef68c746eee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156866 Malicious code in iqbal-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbb7e24713e6b17a9dfff7b5def635a8f5a46a878dffe478d67570c91323617b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156303 Malicious code in ilop-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840922427064e56918a010f863aa9cd3ea1728ee24162a8c9d867f52c37ca5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157620 Malicious code in keyla-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e48ea330732be1cc4dbc2553a93cbf5d6667d8105a56bf6969bc7770ea66c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156061 Malicious code in icha-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400a00b19c2b35ed8b4e047931de30644388411b4d4be91e8ecbda30a913ce6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151260 Malicious code in abiba-avbai-abunahia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b007546fe82f32c3ed3b08594c587b9ecf8f4440796daa00838ef2efa91f1e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64be2ebd1dd0b2ebf1fd6def742ac602cce18ea154dc45155bc2631cf175232c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152356 Malicious code in alita-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d23e87cfccc188d933fe25aebbfa9c1a18f4e7a9fcb0ef2ee2a5b881eabddfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3730ff873ec4abb1c671754e0191c926e8c106fe67eee8e5b70c8168cef6dc26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...