MAL-2025-160077 Malicious code in manurung-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3308fa127fda6fdebd723fa8102040976e6dd6e732ca10ac9ad45281668b9b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157508 Malicious code in kentung-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9664a4faccbe937ca90c56f7eb08e5254f330ae5ab46d84f6ab42dbde9136b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166047 Malicious code in slamet-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdb93605a5d979ccf9275995b2cd7dd35995079e4fce628f07da2272e98caf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169211 Malicious code in trevora-cir19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae53637a12040e00be0960e1a1bd7417ea94d49c9a5d30309e2b422d0403a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168230 Malicious code in tealove-dana24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17bec7633c604ae9b7360994abb823750d43a1fd784027873b3fa94e89836d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150532 Malicious code in @miptaa02/assyfas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f82cff1a9591478440706ea067265d726e17888a4583e9efc157dd72e283b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151327 Malicious code in abih-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920f5c857c813f3f7520a32d83eeab4d73b47a52873c64601f6eb9b81d1b4e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155141 Malicious code in fitra-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd258193c6d662c5d745cca1e6605164e32c895fe7d65fde1c81b5a64966aaea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157185 Malicious code in jurss-gsad-14s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11fc4a24e27642a63f550098a91566b93c65838b07d632a321ddf3f0f6d67d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155685 Malicious code in hariyono-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d4c3eda6b2a29c068aa8b9dceb4af1fc8cfe98fb3d3ddfd2d3b88bc0d6c288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168809 Malicious code in teanager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721ab6422f2532d8262f3b4e5f68cafb0870075010fdede9e33cf58b54ecf157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170081 Malicious code in uinsu-tls-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e863bf277ebe5ead0a28d00309428c67620159df5d89f98b252d66a07152281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158362 Malicious code in lookingan-konami96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8576b6c7e5bc396f2229e2edde099fa323cb8e715ada4709d21123b0b03223b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157870 Malicious code in kupa-lublio-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1b505fd4e0ea37b011376e64b9c1b824604255c789af83eb9e31f004bcd231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163568 Malicious code in nokire-zabuza75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb162ad25104f389a9c9e0973bf29da4bae84c2dcd7246d96bd5933945b7545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151086 Malicious code in abang-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e0307080c0feec77313fc8ad3c7e8f5cd9eaad4d67218e6f7a744667ca0f96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162640 Malicious code in nokire-kilua5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a5c6f0152d4d7f26a2952987fd734f37f2599119750e4ac606a1f2e2bac8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164302 Malicious code in pitra-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d7c2fe689d22727443013fdad01ed5a6a92c9559e75cb675fb52d7d9a5266a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namasae-namuda-baku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6a27248e8e61301e4db93c8fd7544bcb352ac80551df448f37110b8230137f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4734c7b9ea6c4a8cb56bb2f1b4d2a4da62953ce9c087d9267997e719752b83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...