MAL-2025-156120 Malicious code in ilal-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445e193733809ce658d21380c60e61ba5999aad1642a430c5c0f94fa27136c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160054 Malicious code in manurung-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e269eb3d9d8d521bf388a767b6f1498473b2545324d1649a5314384c038d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152674 Malicious code in angin-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09b1ead62ef801b78bc73c642f7fd0f68f523c5bdf2ab80753cb75082eb9779 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155780 Malicious code in hariyono-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a56b0c372a56a1da4fffea05abb8e087c34dc8a274382fa09c8e171a83248da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157991 Malicious code in layla-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964f9dcaf659c4f92c7fd73f123dd632cecd30660911a9e24bea92a1624e97cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164662 Malicious code in rino-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a01864ac034202b556dc83ca45b43f890164f7f101de559a8d273ea44accb3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151321 Malicious code in abih-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb2b5ea41ca672feeb2c29fa69c27e9ec09052fcaa01504ee20411aa25c8e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155714 Malicious code in hariyono-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79e0a5a03d9440d863e1e6bf7d314ae2e47339c5ecba5781843e6ecb6dad7ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152793 Malicious code in arif-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c674bffc00f9f46f0948be76e6733471c0d5e2a364565626dedd840d2bc0670c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169638 Malicious code in ucok-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6031120ee2744e4f353cf279eed6c30f127a29ae1bfa92722b63830c917b75f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165033 Malicious code in rival-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7defc4f96e63f5331ffb36c524f682defbc229f7096a21db2b45267f355d262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156842 Malicious code in iqbal-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc9c05b90d3230f5f3a1780bbb0a409b9123814bb44b9ed3e98f1bf865bf6ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155153 Malicious code in fitra-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a310861ad04921a32ac5bfd45bec205b18bc71861950a875637e27fa15f81322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152726 Malicious code in arif-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3a822a400fab22a687271d5adc854e71bdbe6659b5e9722533a5fb00a1bf250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155109 Malicious code in fitra-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614facafc357a4df5d3932c2aab6b5a7660b7d7496700597ec3d654e72a4d3d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ec54c14dce5c425a195ddee454edde81c2afe1f460dd4e8e13fd7e1dd889d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501404350e8b451d157c554fbc20bf6a81f2632b56cb620408eafa1132762a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe587faefe2b95e93a600d9ae95b73b51f6ca9e5a258d13f98a1138eb8e81a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ea5a411b3392cda3ddb00d8d4f3b764f895b435925719351d061b304cf2066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8f726776c700fb192d3c1203a3662c0a7902040d0f394f71971792fe06480f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...