MAL-2025-155204 Malicious code in fitrok-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1fa211b3394c3f2e2c733a3412d88468bbc8bd746a2bbe06e69bdcefa69f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165386 Malicious code in sabua-muhuyu-tadia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685fd5f492db75f11fd553a2d20ba67a0126d681592155415010895713cb5082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155531 Malicious code in gurs-mipaop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6dadaf14d8640794002c939085af0bf79069ca847feab8fbea0498c4cc586f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156523 Malicious code in intan-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc73e5cfa7afacea1f4595a3ce6549eaa7f987e98c38f98fe9fdbd3ad6fdd80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153605 Malicious code in azhar-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fccae25d42ba7cda3721d22b830d474bb1b2e1fa72909971cf8c9ac26c54431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162346 Malicious code in nokire-arhani34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe3bb46be3b2a9d67a7638aab2bb49edf53a7f58557dfa1119e178b872b4b17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163885 Malicious code in nusdtafr-msiuyu-nurtrr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87fd37f97f7c9b3184798307414b251b6bfd6c8b7702013dff05719f62d040d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156901 Malicious code in irashi-se-1231 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6f95cca96bbb701b3cba444cb5d91493725883e05d572e42ca96b82c75900c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152932 Malicious code in astia-ala-malia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef59f231c5ff11e783b5a0f3b3a0b26c097597d75bc2989939239e2222cd3bdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163086 Malicious code in nokire-namiresan34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25c69f71fcaf968f7f5a869b3105f22a63889c1d4fc89a49e2a9987b1029301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153224 Malicious code in avminah-fagnias-ifiafagaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b3a4d44a8260711b9c83657c80531b068969adb2703fc81d707dc1a1ccac8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165822 Malicious code in shilang-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5301c65f0d4562e612c49f2d59e396144ab4ae90488e0e5ce2aea888e595a13e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152001 Malicious code in air-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79bdf3d9f200642ee404437512065b3b3f0b9fd4b39598105e7479312a2cb53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155394 Malicious code in guras-kaaro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35ff7e22cf6ab67041430f35a0d322b5337f912b6d9fb7e5724cff66b65ba33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminsah-afbafgaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b4692420c12c3744d1504541ab79087368c3a3a5ca50785acc99736e4ce7404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163442 Malicious code in nokire-sekiya51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72acace0ae2b565e86234d4296302ed0394275c5873820a8276c5b52bd3b349b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163745 Malicious code in nudela-agfafof-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f4c021f8864528141f139db1a580e497c8d9d32c639579b6b1d457410b56e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-pino-docusaurus-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683cfc14e746e8998888746ec4ea2ac14ca8ba402d97fc8885f45b80032fa875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-gatsby-fetch-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de2f9b8d363ef3c5fd440250303d6b6fd6a231b41e7b92f2ab5ae9881eaa924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...