MAL-2025-152541 Malicious code in alvito-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49070a91d8d29621aebec4849345c0dc242b025f7f26e9431a6491cc0440c5bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161259 Malicious code in nabila-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5320c27f8a8f07a38a26ff12cfe48f0d043308fe363542d58de6d10e4557c667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165434 Malicious code in sabua-muyafu-dafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d6ae0ff6f9315b7ca0b8dd4db5eabf2d7f83bf87eb5435ed546b8329272606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156716 Malicious code in inufgi-gotumafa-anz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fede9749c357e2a01f78de73551be4872331e2659e0a8986a6ef514e4cc7d6ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169364 Malicious code in tusaasya-dgsdds-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b5b89bf1210a7a0442d01de4414c199ed7815d0d79bd7764a4c6e26ec4c03d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169013 Malicious code in tehah-murasa-adsfan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff371668d83153513e5a6ba84a2931aff909f0fda37e3a2beef972a2495d6ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166313 Malicious code in sunden-dibok-inumaliuinuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bd4aa45c834c13961fdb3c876551366055b6837f3b7576635c38edd6322c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155896 Malicious code in ican-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcb9ebfdbca8dc56dbeb28d4b38ef937390f48fa487c7cc3b256ccbb593cd3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162321 Malicious code in nokire-arhani11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed8358a1cb1337e4abdec44ed42849a494ee09283de22b24935d8df833753868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165967 Malicious code in siregar-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b3f543200123d69ec4385c195dd7a0bffc8aabbc0a98e3f1f62e07201e4202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166160 Malicious code in suharta-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9c811733411efa64f45c86c481bc795a100287c98f1257251ae3951703752af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170110 Malicious code in upa-lubilio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df196f7854187d193b624f7666452634f4f1be6f08a18fdf5127729a8a36282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164646 Malicious code in rino-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec3ad516553f1ea5f6a4394745167878daa89713780cc7e72411daa4ac520365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164297 Malicious code in pitra-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4893d56a3b34ac1208bce6bc217cb50f4cbbe1df9fb496fab4d3b7128d197ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168994 Malicious code in tehah-mises-bauyaidaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba090c978fd5ead4469e02e998afd9149f0e85de92b303a8b28efdbf3a73685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152896 Malicious code in astia-al12f-dareagahuahaso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3abc2eadbde7f463a35095b22d52003a7effd2de5996dde7817718850ebe7368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166368 Malicious code in sunden-udik-vaklkanmumba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa534bfed18769d79b44d031faf542f73ad2e35d708b0de0e8078be8d0740c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164712 Malicious code in rino-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a9378c45aadeaead0f20da20a9c79b6528417a988ad2dfaa4b2b90295b202f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157416 Malicious code in kapafovgiaangapfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0c7c7129441afc5e9760ccef837eb6a09d56bc6016b5775648769676186665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158841 Malicious code in lookingan-namalaka30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2861283b509524712a834b159715912074a962171a410b8a8782e2c2459b81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...