MAL-2025-155237 Malicious code in fitrok-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a83e9031b2a1e5a6083ad969e03e8378d72f005e9579296fb0b0fb408955535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166464 Malicious code in sunderlan-uylud-vamknakiunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba979b6218f54d84a24478198adce8a9faec748e25787c4ccf29cfc55d27bc14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158085 Malicious code in layla-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5615684b0876de06d497e8c6ae487815e7976304b9b3eba25d36ca4db18c75b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156494 Malicious code in infi-gafob-jagia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2db76fd07653329e34074a8d27956d0d45d6e058e764a5df090cc1cef75fe4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163358 Malicious code in nokire-rara67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c10073aa7559ff080bc7f3593d6c80233d1ca6abce3aab1f825d5bdb82ef231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155043 Malicious code in fauzi-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82edd86c24f6853c85b1184697561ba10076b67ba638115439838ae57c368c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155428 Malicious code in guras-nutra-dasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a37b076b839c9eff490a2d0d99c950748491dde61f5ad5fadb93c7ca01f8f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163337 Malicious code in nokire-rara48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7540c919c81debcfdfafe31bc455c1a0fafd9b6faba160e6deff2c44e0e79bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151096 Malicious code in abang-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4359bb788790ef1aa944506e5a5876bb3dd500aa5aab07f6d4c6754d978739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170118 Malicious code in upa-lukzuli-ilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1f8d81536df8966bf5e775f6a75fc14b03578fe447bf14f3f198de287131c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159020 Malicious code in mahnud-magfu-gomamia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4c8de7f71ac8ae667e4184aef52c37736c832c0ea43e36f55c284fc85ea2004 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160593 Malicious code in modirai-fia-jastyfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a433dca6d4c796329816b4088b30b2a3089378839777e93a6a311da643ba9d0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156418 Malicious code in inal-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa34a72db2b03e5c6e01f852adeffb80d8339b99b3b55fdf841e639c39f28b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165725 Malicious code in samehadaku-msssi-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9766c8d7bc4d3857a11bcc081eeb20af10f806efbc7e9ee4be622387b0d1ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160931 Malicious code in munir-teaars-terb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0713a00eafb9c794ac6b1c030b88558371c2d13aa6666ca67ea03fd3ae2613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165255 Malicious code in ruji-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955210882f5afe179450e9d7ebfeaf6cd76f07ee72d40db66639ba473785f192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157260 Malicious code in kamasada-buysada-dair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 174f628946e4cc6aab883bbadf0eec72282709463e74052384deda938a25e5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162349 Malicious code in nokire-arhani37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cc490afe9aa0bae275c1db07317d2491fc5c699e671fd2297fac1db4acd45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166678 Malicious code in tadashi-tssu-rene (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34120a88083bb73b5fc46fd1ab88ac2f47981251ad1df0c6f07b322d13e7715 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154074 Malicious code in cinta-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64dfc764bf3eaab97379d7284473ae63e0e4bcd90d7f5c443876b58d89357516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...