MAL-2025-172863 Malicious code in anak-jalanan-mdn8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda1c787aaafa5fb873abf9645ad12288383a353df472c556e19ed9a810479fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175201 Malicious code in kapvino-socovni-faffsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ec3f02116b4db092dd2c11d0dd87d0a9b1c0f0142c1c69126d0e83abf60b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179223 Malicious code in tray-iutuzp-terzusy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85802c8332b8c11f732da709007b5681fa82b05f049b34be70163220db2f970d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175796 Malicious code in kupaio-uloka-jakaloai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3ca4821bb1ded4d4a9a8af8cfa0b645e161351e2d1d974843dddfea1ff3e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175539 Malicious code in koko-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37a108cf276880cdc128507e3f458096cb570a67cedcd6ee48a2fa6b61ec119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175924 Malicious code in mahiya-suayu-ganoao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75efb949d8bf5f037d9a12178dcf80fe5f12f7aa07d1253a18b42b28fb8f45b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179405 Malicious code in zaskia-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55814364a30d90f33ef6b22d7b30af31fa5ecd22833671837fa8573679c26dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176601 Malicious code in nuilva-avmiam-ravfonasia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48196fff82a34adea17452238fdc34d14482aebc23562c43fcfd85fd8819d3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terui-umuaraa1-miti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778776993e81f4d86306ffb604830830841e5749f093d918ae618531f0da8b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibog-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0dcdf7b979ac21945138232f5c2fb7f4dcb01f2355aebc3a42c08f0221d577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutup-nusadya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ab28daa8137622cc76bbf2bfa03a98209c101b1984f0fe2b6c69d7fa40c93e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177145 Malicious code in nuyar-da-rofdaadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3043f3d8e332db623baf44067a680a7cac2c8e9d9ed40b1d061b0d2a43e892a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174532 Malicious code in hakim-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2381d00a7117cc3142bbe724c53b4998461f9de697ecc036a3080d60dbe3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172423 Malicious code in heres-matinula-uinayami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fc310e54ac61df21a54759517df5dddb3ce63f860d60fed5f016a1f6769ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172614 Malicious code in verts-otio-nahgiagfigfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb0e883db54a61bcf6e222b12feeb5454d58e3f815a7b01f99fcdf57f1bdca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in devendrasingh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01041e34a4d87960739b20f0a7b30491aaf24837f0386ee7e2fa11b05804c50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171546 Malicious code in marcelosantos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca267c3424e4995aa4ff3c8a767e1c3afc05d6d476603f69393ebf5c4441392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcdec47942174cf618e9d97263be9af576d44a92c96a39fd0e21c7cfcc2dd184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724d28a0238fe7931e5837988ee95993bedcea50c7223bde234a9def0ccef22f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8ff8944d0654ccb9aa2d37cc0fcc4330b1fbecad874fe7254950b7ca93fab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...