MAL-2025-152262 Malicious code in alfiansyah-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5be998866c2d78a223bb5bf69f7b8e98f1e372be933ae1fa9a81926e669464b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163684 Malicious code in nudalea-fofiri-agomoido (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b9227199a297ddc4544fbc2999a991d5d0baefb4e34f6ba0029278ca54d1b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166687 Malicious code in tadashi-tsu-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48f62555020dc84bbb796f7da298d7b26a2c6c9fc205a9e1b01e0f09aa965f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150778 Malicious code in @miptaa02/jefp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06500efef11c6a0f8ed21e821254f15fa73ca12f7f738cb84cfd1ed7f64afaa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151081 Malicious code in abang-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84a02c15318d4139fb1f3670c2eca464d0ce3816ac123021d11226ca2b0ec89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154422 Malicious code in diago-klop-kalosibak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a6f4304eff398deaeb3d98ad676603754436adeaee8b9c4d5edffabb861d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162029 Malicious code in nasution-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52deb8b123e1640b7e39415b1d6f9800f72116725d282db2ebb83bde0a78649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151013 Malicious code in @miptaa02/weaddd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc322c8d24bb785b79bab067052c9eb16025ab2f171ff58c361be32f9017a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162559 Malicious code in nokire-genji68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728a9fb2f24617af68eafa9ff696b5f16137d09c7e5fde3cb937f82a3ec16c63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157606 Malicious code in keyla-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f68004e30c7c695a6e122a44c2dd4cae04548606f283f30851979180e01caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164183 Malicious code in pilka-lniu-limikali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d915ecea11bae782b9b6a2ea5b0fad598059c1579c56ba8164f9386f337b693f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165979 Malicious code in siregar-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3b1b18276bc8f1ff49ed29b9779deb13ecbc96b1e2b8e15e881f3cc1bbf03b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151639 Malicious code in abuylbani-nikubamia-luahumubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90a992840f805ea3e409ede2e5b79b80b31a496a15d7c70b1fceb47bd79d8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154526 Malicious code in diago-kulpo-lukafhai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 796048fb315de96f5cf9646bedb3e5d27e6cffa7fa6805e5b762ae08263abf74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161784 Malicious code in namae-nadua-maav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0538c2c22498b87febfc581ad13688ca7cf8c40a4168b2942448fedb3bc42c83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158461 Malicious code in lookingan-nalako50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebaaf02afd0aa3e73bb5115c020b3b4ab603d8aeb116607813bc3a2178bfe4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162084 Malicious code in nokiragne-afgais (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cc84a3fd024def18874f318ca3cb8b90d627fa351b594c4b3d7646142c53970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd0b6a86f815ac01a1db46314b1c880fe6de431b1d6abc3f73f07ebc5a7f44e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152677 Malicious code in angin-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29a235f59f127d0550d359eb5b0703ba220da51ec820bfeb5bdd0eedf62aca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b299eb041792d4565a375a55ff15b53c88021d167db4dc819712a7be809f629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...