MAL-2025-155193 Malicious code in fitrok-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44715323a34293ff3b7be2c374c7f4ac5ba18f40dbffbad4b036f02b648dee33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153620 Malicious code in azhar-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 034195c4ec9d6010c69905cd2c6363b579c1654264e455e608347407e1dd1f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151323 Malicious code in abih-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5feeb7e7edfdff1d637e69046a5ea7542adacbd8d9f0ea21cad0941d944623f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161385 Malicious code in nabuf-otgaf-dajafifo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6377a0e95161d45cba7f6eaf100e615b832d9dca96ae5bd95e1bffebb595fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154167 Malicious code in dajouka-faa-sa3a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705c2f034ffea819555a1309c6a9df958b47473603ee46bfd57c218a37fabb28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151972 Malicious code in aibopuna-mobiple-amaora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15cb0c24cf6437d5e29ab93f0a74babe32d18b9f45f1144e043fa3bdeb0da0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150304 Malicious code in @mipta1/xfsizx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c978259b32227519bd0adcdb1362ebe9ad09d8293f91cd8ff2a8affee983177a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157480 Malicious code in kapvino-soaoi-faoagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d298ef083c6842e18af1ddebda23a420d6d74acb5b0e835ee4533db37dffb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153930 Malicious code in bufpani-mau-nafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe9e2bd2e1d52cf173d15f9299809f8ed6753a171af4ab75f9d4531c41200f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157533 Malicious code in kentung-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d153037546b444731f53296b9dfe7a57278749d65906ed5d7b40f76d6b8c326a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165508 Malicious code in sabuda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab4b643cb19e67ba546c21d673a971f9ca17a7231ddfd4bdd166404ee1cb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161125 Malicious code in mutdaufs-marimasa-deadly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98de013311c541e3ce8d44a7f61a61cec7bbb864ad0a0a12d1aa88ff6f21687b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156363 Malicious code in inagi-vumayfe-naaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f51267fb948dc51023d86d729143c51507716cecb36c2ff35a9d6a6aec17420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158232 Malicious code in lintang-tea7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af6ed839fe65980acdf77fe4a9d8566c315d25de2c84aebb585d5719871a63c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150478 Malicious code in @miptaa02/adaie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08f7a2ef0b07b07a7f94d81a03125cae4070625aeabf46ff2ca54904f8e7740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154985 Malicious code in fatidra-faradada-tatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76748464a4f76af89f441e4cbd73e1d604639e39ae7fe5283149946523ef8def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151602 Malicious code in abuibanua-mobiman-arayta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e7afe2d1e8e95f8c3bad40987f32f7299f6abaa37bede9656b98d7b21af5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159083 Malicious code in mahnud-nofity-gaoni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57da65aefd9d98d16716355ed415f9b55936f1706f5a483e41a4f45856ca3b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154891 Malicious code in fadila-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d986b3ef44d955d6ab063251509cf6c2850e32f4adf7b9f3c55fe7ac33f5d10c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166108 Malicious code in slamet-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d426de1fe800536e86b5b66fef3c6f22c878b0b7be2a3d7be312f022e22cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...