MAL-2025-166022 Malicious code in slamet-poke118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff0f74492c4ceef3cc363b519513e1b88872a92785534abddb7de03a8c8fe6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164122 Malicious code in pilka-kali-nuliva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474ab794d00e7bfb2853cde7b02f7257342ddcbd645b3a71b4053ba0e0476c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159103 Malicious code in mahnud-nofty-muatigu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58da6a51503c77f50a6e3b854fe1d56a39e94363fedc6ee660d805376102fa00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165985 Malicious code in siregar-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfcba0ac9447bfdcda6fa59b3e7c4e90b2315430e254d9934922df515b6dabdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153397 Malicious code in avminh-afgais-fafdosafiafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4fe2aace4c5e498133aed91e955a7f9b59c22179540f59ed1681556fb7983a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161512 Malicious code in nabuf-otmban-iagafaipo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd14fc6e564d19fd88e20488a3f6466e66ed9cbf3a10fba2d617c5c49c326017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155362 Malicious code in guras-adst-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4243bfd356451ca205a5d3c991e159e2f091c58f66e18795b643347275ac927f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154329 Malicious code in dia-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763f572951c858607e292547d7632b5ec90401747022ccfade39b8ac400ab5b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151440 Malicious code in abina-mibon-aguphpabmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7fc907c0793dec8607a9f967262806a858bdfd9c047c0e86feee8eb044fa74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168740 Malicious code in tealoveness15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea523c7a8c2b51591dc8c2787d10ea30ce0d89641014ab3f2979e246625c7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152428 Malicious code in alvino-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 622b2f3bc6c9bbd2e0298b450ef73e1a5869938cd6dcb19881027adbf90f6bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tila-mazola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea8734e7a86372b91c99c2ce5bc6c6cad1d0efe2a47e27b94585f02189e3787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sordadi-naidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56b933173bc4b1d6f3f79c6d98bca2badad50b9f9af0f26740afe5b95f1d0fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7f8e71bb6d9f563df1e4790ea3e2ee5133bfe5c4b4be3b235141675aef35a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lukli-ilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d883a081b0762bfafbc09ed7f296c2f92059c0fd4718ab962572e176dc424849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f38b0a9e8dc1e764a240a728fb1d4bc5b7be038d4c8dc2c83c441399e3f00a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0a639bf06f6ee23c110d4aa922ce9b727574fe48f1c2e2320944fa61ff84ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b91a9da3b84184a76d608829fe0df377baa481a2b3f94f27d5d71b66a1efa498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c010faa4849f0749b12a3e7d5b986048f4395acd4226164cf82351385d9b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ijjc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781a1c1e48bca70add675a0bf78e3a899ef182cbce9d9772bb7941a0321bd5fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...