MAL-2025-152769 Malicious code in arif-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6324655cfa631b570e218453cb7f08b910faa2a3b335b122c3c3ec3b2f5aed88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150834 Malicious code in @miptaa02/mina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002249294b795d9a3fd9c0f6ae2f66963a13ba10cefac47e93f3522ba153597b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162738 Malicious code in nokire-kore8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcb0faacf086977fcc49dad56a2017f8e6f90bca73a111b2afe4480140fda482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161804 Malicious code in namae-nadugsua-napuysop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426ebe17abbcea390d007c8e3d1eac0a124ff12a616d00d7d9146de146341ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d59949fd2a3ded355ed70935d71d06a7345dc3953c087d2b14e504b424bee5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159087 Malicious code in mahnud-nofity-gonifga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb463ddf4373ddd098b033ad3307dfc40c6ee5543d08c9ca1bcc82ac814468ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166228 Malicious code in suharta-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dabf70a1c4c80a397bb902293546cc17cb3063791909c3d3fcfeaa29040d5233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165877 Malicious code in shilang-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3121b1030817a9e12920e28a9a40644d0f9174d0e62c5bf58c8dc878240c69d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-siafafiama-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60c05b8fb474aaa9352fee75ab1925e5480d872a4921af16de1189a1e614c8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938383d9baa44e5ee1973875967c1bf5013ebbc5614bfad7038e6ae9903d9fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-diak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e60c195496717d702ae857f831ac6dd35547b9d56943bc94b9e9667f13060a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sfga-trud-mutiar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019fd420e4607db13a6bf8574c6716bfc36d51ee4c2c330a23109cda25e0437f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2635bcfbde844e8df2895430d8dac0a593daeac92a1b6ca96fdd795fe98931d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0e94b495c0194f9348c74f2466e94f377a06a6fee02647a8e5e63f6e422208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nufaiafoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb553b1442a8dbb9183fc95a106b2a6fc7c61b404ef2d07d59e64f51a2fdbaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lost-dauku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d013f725492839ee5e7e57ea4f286f1dfae355aa14ae2e525646b7824f52a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152257 Malicious code in alfiansyah-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c3a758e5e891bca449876a679fd2074e2a87ec7e862d0b8d8a97dc974696f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151642 Malicious code in abyia-ni-luyai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f81cb103497aed7a2719e5779f59c495b80c7e5e42a3e70fcc671d619a6353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155040 Malicious code in fauzi-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9714d6572cdb9fb4a560b65bb4ee19f1c34a2f8139e03cc17f028776a8e0df69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155660 Malicious code in hafiz-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 624a3bb1ad494028c57ec3a75c3f6ae510b13f04af44a2e50f0c664f82fb12f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...