MAL-2025-165204 Malicious code in riyanto-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2c4e23123dd792be744d50d62ae87acf75547ef98683eb9d3cc1539f9d9b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160897 Malicious code in munir-n-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e3ab4d7b2a9cb8f5025fbc79e1c9d2658f22610b39e5397652d372ea7ddbd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167351 Malicious code in teagood-nakamala82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf76f383dbf12b97128828eda355160a8b7e17c0723ca967d4ef15903f2fe64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152341 Malicious code in alita-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9e0be8d52bf29a688561ed923d8742cc68b0fcfdc55bbf3eba0447fd642664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162019 Malicious code in nasution-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1946bc5c5b6ad976bbc7c5b4278684e4f3b2636bf99ba3653052d6e2f0483950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169205 Malicious code in trevora-cir149 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b125ddc1c8ae5a7507fd0b75020c384c78a3b86427fb23bc7690b35179403019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153122 Malicious code in avminah-fagias-inffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ea7140301131ca67a853e14dd0cc7ae5744ab50638dbb74ea4b866bab683d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161708 Malicious code in nabuf-otomin-nosuadfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9444bfcb11a4b1e462c58b37487dcebf1b3de3e4f3a0bc4694e3518e32a53b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155986 Malicious code in icha-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020c8adda2cc9ace9acd5e91894eb4361e51b562c83b195285e54958b4f6e246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151319 Malicious code in abih-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0382d6502e72beca725ba8a481e479e2984343acd6fe759a6f34567a8430a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152625 Malicious code in analsia-akifai-asulanini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f17c6622e361b599d6ddd0953acba1f8e7fa57f367eada409ab747957f5f1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151696 Malicious code in aciaiaggu-idat-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c00a68ebf47f9ed492f996b753a0a727fa5963579f57e88b9ef85a997c2dda26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170576 Malicious code in yuda-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab34cd176788e365a3a652d0944bbab4691a6c00c67da665229685b2d330eec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168977 Malicious code in tehah-manda-konatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d8bc955a9c5bd48371a6a2f9fe4274ea8e7eef5ebd3587c317f2f33677be80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152015 Malicious code in air-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d26263199a0c4f66c07145f26d1eddde4480b828523c193767ecb061b9877c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159393 Malicious code in manadsi-scadador-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faea42f951a5a80fb67338b408e29b31d446e6da06da8ccf43d654d536004ae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157532 Malicious code in kentung-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d867f9b185d6081d16c49eac730df8c94e0f87c7f7b21327666af737f7571160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151779 Malicious code in aciyua-idut-dajuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b977b000c4c12fc11365eca0c4cec83e1da74b05124ce62a266aafd763fc9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169453 Malicious code in uafagru-musafie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de838e9eef4765d95276dc882bb61056ba1dbf4670790d8a77a55e2090007ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163938 Malicious code in pajero-cir10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84708f8be4dec3cd40bb7dd7e07272e226ed8e2f3ed193b7f0f7bc9253b21b07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...