MAL-2025-151523 Malicious code in abu-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae2f088b849eb5923bcb0e31d04593a58855d9d9cc0075e35d14ae9fbc75a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155725 Malicious code in hariyono-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385675710dde9d5a43a1a5432a83a27dab52db2d7b97be6468bb2ef0c85aafe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152345 Malicious code in alita-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867b63ad31012beb59d5777c9c5d23f8bc649e3cc0f627c8af35b3a0d494909a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156984 Malicious code in jeep-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bad72f5bc4f4a4a2f0f1277ce1b91d0acb30b0e04665e43acb6ec6f4a49a90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154914 Malicious code in fadila-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c24a6185d803d4551a0f1a0378665cb4c01fef95df3dbac0e9da42d72c11c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151570 Malicious code in abuh-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82597a0195b96150895c292c4e99607f11dddde03d976e1a2ab3160a653a6e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164601 Malicious code in ramadan-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3303fffd0cd2c820c512feba873064e27b2ec0fc3a2d8123045a8776ee2895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164627 Malicious code in ramadan-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04e4e32b3fb031cba4f49e4de8afc8b5cabc6cb56a2c13e28637306dd049e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157597 Malicious code in keyla-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3765a44482cd50ae2101f98f3c2e7083faa151ab8f40ab3e8f69d33041f193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157009 Malicious code in jeep-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00b567594cffcd124907fb88923440d41cf202da40de107d569116a34f6952a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165980 Malicious code in siregar-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25741af88aa1e88589cc0afb37f17f5f986ccffa45c0eb55941395e5c6ae462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165035 Malicious code in rival-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ef17468e670783fdd21a1cc3063467cd0fa89df38656a40b026e1d5d5276f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161940 Malicious code in nasrul-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230b7ddea62ac2c547d9e9365c9cd21c2ea26e3c1b21bb7d0e6b59995a0196db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155833 Malicious code in huda-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9037768b52fad01882827788724723884a4a0a97591b71184ee9b2dd037fee92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147152

Malicious code in ucok-poke4 npm...

Malicious code in siregar-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce7fb01fc68d62d8c1220251966e75bd1ebec0c3db9e62b37dd42a45b707a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ea06126d1e9a3c24371b3ff4354bf63d72eb1cdf9dd8241b1cf55327b6a5be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951f690c99aa1da2ad6a71d91c7dfcbe57bd168fb7dd70832954ce1bdcbddcf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29a235f59f127d0550d359eb5b0703ba220da51ec820bfeb5bdd0eedf62aca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b9b63aecdf80c171baa060d9f68b2b490e4648d803952627da84e6294eee11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...