MAL-2025-154918 Malicious code in fadila-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3fc18a02084815ed4533cd534fa89520c626c793416ea26ebbac1ae9acf969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155050 Malicious code in fauzi-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c795b0f2ca90c15f0b557618d177c83c02f425ed69ca16edd6b821aede88c824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156571 Malicious code in intan-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3352e16327f7d0620ee9a4109ccc31a3d9a7b5d62998327471f46c844efce44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157452 Malicious code in kapvino-saa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a58a17ba251e8cc69213f65a958c1aba9c0eb01185a8149ca18912a48e88e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161980 Malicious code in nasrul-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533771c0ab1d4652bdfd2c4dd1df88ca107bb75db54556ac570b0a02a914a349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156944 Malicious code in ita-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02837453fc85346dc0fdb91f0c694c8f5c0a938be35503e2f10d904f2f20603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168901 Malicious code in technical-alonbio-tolai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 339091d6e8e3c90d1d2b3b8ccc3a5202f10410e0ce83ed023a7c8eb9346a5635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155138 Malicious code in fitra-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b555a5e111c5418f7552dd48f378a234b839400250fa1d7da65895f7336556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170539 Malicious code in wulan-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0b2bc8d499a0d1c5faf0e227e8a2085467ed4ec95d36dc4f569c4afff6c823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156390 Malicious code in inal-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719c46605673fc2e60e0b37fb85ff2c41297cb3fb47c46413f110ca53eae71f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151036 Malicious code in @miptaa02/wqh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33874a1ac8a6cf1b4e4d62bcbc3d47d23db3526eb4986f4bd1e6e752fc52832c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162407 Malicious code in nokire-arhani9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e6902a7d636a1393819d821771ae351c28d527379c98b6542053a1af6f980a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156745 Malicious code in inufi-gobai-jagrun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2c9a6914a176d4896dd22f190570a7fe3efeae220ef0d6a23a162d3419f599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155374 Malicious code in guras-asia-nguye (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1adab17972c15caa7faa7438a08aaea1a3eb8fd14d8cd0735ee2941bc92f42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151266 Malicious code in abiba-avbai-aub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33887bd8d11ee982683562d6d7c7acfee18617a0816ccc40bd33cfc4cf0ae465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157553 Malicious code in kentung-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63034ae505aa86d47357a1c5b87ff0fc17346b8f82b661062cc63e99cb4980d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166191 Malicious code in suharta-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a07276543d0d09e4156be6b7a6be416e0c5f88f889b957010010d97b6444eafc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160396 Malicious code in messi-urt-efdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c455cfdf4bfed4d6bb8e674b73b85cebeb37cc6551b147b5d4363ccf036fda1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166463 Malicious code in sunderlan-uylud-vamkaunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683fbe15badcf0255eaa5d0d8453ac1ab6cd1631f56921ee8b0992f881262086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168669 Malicious code in tealove-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af33441bdcd049e01bd2160e4dbf928497702947283412940bce734c156add9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...