Malicious code in ican-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c284c19eaa9c6a40caac1c5ed1149ddadb9bd7e5eaf995143a1b79cf388d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157474 Malicious code in kapvino-sifafagiama-fagada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859f288540fe10f993f74805a9f498f732bc4d31eab6f2d1523d1e75a5cf1351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164845 Malicious code in rinto-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6710f55feeeb7c3c865a5dda53c13bc466d650308be39cda03781f4ac9f5546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143249 Malicious code in helmet-dactyl-flare-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57bd1c045b58ad64b757331e6f73aabe93eb2e88d53c053b83f4c13383b3f05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138810 Malicious code in interesting-jade-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe94810cfbe2fecd8323a3d608369dff883fb8418a542956e97f25dadf9b5785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135638 Malicious code in mulyono-rangginang61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3113fab76084ce76997cfd232f52a3c41dff4df9c3f5e2a681f89387248002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128982 Malicious code in nurul-lumpur44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ade8edb12a047141290f1cc865addd27ed4c3d2974308aa17e5bc33bb4c720c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-otak-otak35-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca65234f0dd4209ffb67f6ed48255e9a0115d3d4d2f5f4254afb9299e19f1689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85680 Malicious code in fond_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efce78b9bcf04703b8778bb31d8a872fc7a398a919f4b40e12b64ea128323975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68419 Malicious code in free-apricot-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe2082f7eee4806802a41388bd9a54b6b102ce711057170d2f488ebc59eb4d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-pecel56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7efe6f3b74312e04ed0bb861487252c4020126dddb3db4e53d188bbffd9227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...