MAL-2025-154896 Malicious code in fadila-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee088ecc851159a2e4c482fb4ad70384cbba1597db93f39882efd164197bac86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155131 Malicious code in fitra-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0317031787d3fbbca1ed81572a7173e9e64d1124517463e73f0d00df0a2161df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77bc50acc9243fd3954d6f85370207803a314d486ed3a956ff204fb82fa79353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163816 Malicious code in nudela-ofgfaf-gajfhhagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85e3cde6d32bedd69afa84a6a5782f3454d60b881f63bdc83e13a17649f7097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155717 Malicious code in hariyono-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25303934a10b7a6302c8adf799c7244df48ae152b1bfe8499cb5ca783fe587b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167065 Malicious code in teagood-lokina95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb22f14f478f791abe52a15b56beffcccaa45c9128f5600fa0bb805092a5fd22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nuyadtasfag-amanasatan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36379a76bed2912923059d0f2a7fa330b33ce988081db6d0deabdad15f5f3fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152367 Malicious code in alita-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b0c7dfbee595f3be9e4af603f4f71499bdcaf6d987fb5210c5462e739f0cd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152481 Malicious code in alvira-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5617f4b1b2d746bd652f17ab0e7ab5e2c4d4ce1ddc577d81d0616df63d00d0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maalasha-nut-posisi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65bb25b0c8f1817dd1280276ceb9fe410ab294228eb8abc700a487b3828c1289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f49a2159ec9ed38a8dcc024f23b4ead5cc8734dcd6a3754d90e1714fa805e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49bf78298a047631dd650027c920b99bf525c6c84cbd69b2b4fb115102354b93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eeb7e43408e1f666221f63f5af177954141160c2ec46477de169e7ed92b8e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efa5806410f8517b496943defe15164a95f753456b8f92c8776c65828cc18f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159168 Malicious code in makaimaigan-aniga-uag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7186d1dcf40ae9b3cc335a2258ce71dbdc428e78ab34239847fedd78da49da56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158972 Malicious code in madan-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e9176dd1fc496f2774698e37101b00ecddadf9b00395550f5f3f9e2a6e75d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154667 Malicious code in dioago-kamkoi-alasiasaokulima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f69db9abc133a9dcab7b3690000b7745dbec5620a4e69f8749b257b6c3f7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158936 Malicious code in maalasha-nut-posisio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e0adb48639946bda92df99e5a786d4aa088516300ff643c9db9c19c9ba1377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156987 Malicious code in jeep-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe93576e307e1d02824e5846cf94db29b2ade50d946e937f59c079c5a0c4d3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152380 Malicious code in alita-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a282689fd839f988b785c9b3de7d3302c3099f8d19ddc8a92bd6d84756e019c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...