MAL-2025-166594 Malicious code in syahlan-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea58671f819ca75cbc500a288b609e18fe1576f92b03047e03eb686cdc42e5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169168 Malicious code in trevora-cir115 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16fd502da3b5069623d87ec6e390fd796beb8185ecd365496aac0b5ad2e97912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158345 Malicious code in lookingan-konami80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7bfee52b97b3eb63e913e68b411394996e88caeab6275479a7e9444b1094a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155756 Malicious code in hariyono-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0622e2af98403db80085c90be2505a84e10412806cfc4ab2261b2be24c94e09a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152504 Malicious code in alvira-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5179dac34e3616ea6c5a3731a5b54e9ab4460a81546c30465658f2e4470c8d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164724 Malicious code in rino-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276248bb5afe305ce0caf5d5b58df3d374d1c3d6914ef9c317e89311e7db228f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152245 Malicious code in alfiansyah-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9b4f39374d9f313e1f09d3b3afaf604bdfe3fbb51b59e5f171306f42f62435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166963 Malicious code in teagood-lokika93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c0db044c9a05218a54d89eb52a95da5749ab6e09febef9c98d9a481205af14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150299 Malicious code in @mipta1/usir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b4b7332b1c567fbb372249e311f6850b91e1a679e62c0530e49f00ea0b3a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166109 Malicious code in slamet-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 784e76b0673fd3ec39cf05e35b944037a72be2d2060dcc45e80d7a70f1e009a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162837 Malicious code in nokire-lokcek8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdf0833e813e16d6b8ff5d2ae675299b748a235a6e4a4c9a7fba7a4d171e09b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162460 Malicious code in nokire-arjuna47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca64dbfc559a0182b4d080200064e76efba5d58fe94245fbf68c0134cb8d6fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157685 Malicious code in kuinsnu-lki-kagbdsasodasdfdgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5138e292515ef23e57eafbc4ee48193ab67ca35d522c199f3171e4f74d3b5a7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157678 Malicious code in kuinsnu-lki-kagbddgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3588f120737d2821ca981c5dd367f6c18bac05d861a730323cc6e6f8d326b523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169386 Malicious code in tusaaya-s-wfesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a8d725e52f179be1d2ce3495775ed6f7408658f60ae582cb3229728948618f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154529 Malicious code in dian-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36d02fa5c46d3ed7dbba9eeb66de0a34ec7eb35f99e41946eb971553658cd552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161858 Malicious code in namase-namuda-bakaau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0db8b8ce6b9fc76c544915632bab6991816b31bc2f0d5c9f323ada9f373a4f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154920 Malicious code in fadila-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 658a5cf37e25e9e0101e004e0a0144d263c153c490b0977cca5f6ae31e046a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155476 Malicious code in guras-visa-jap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528302afc9eee9ca29ef5519e69788fc42dc13c447e30399144b9b37dc53cfba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158021 Malicious code in layla-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a53b29f92caae55c83d6895ea70e0c19a026bd69a324f88ab5839551f659a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...