MAL-2025-156851 Malicious code in iqbal-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23a13731410855d64d684659d96441699e6bc02846d8405bab3e3ca95871d68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164549 Malicious code in prayoga-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd0d2902c8c3fe7944887f731b7012d234cced5fa4a2b7685d747e1269e1a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163979 Malicious code in parwo-poke119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e77e2263b52af4ad1bf8924e1894d7d215859358b4d44bff778084ff0cf6b4a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155444 Malicious code in guras-nutra-nutaas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d54d995e30ef98957b60a95e54a0876003dc6fa46a8360a6eb906d72bcfd942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160244 Malicious code in mattu-muoape-butda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776c441232c02cd1aee0e4fea6f5df1872527b9c1d1f718e0c9ee0fff8d0fab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157541 Malicious code in kentung-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c0eb29571612b803f90606117cc73b174bce8b74b8a32daa21b66fb3cdf1c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157936 Malicious code in lala-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca7a7e634fc63fd4bd57658c656a56df86630c29f30e407f45a4d3861d76a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150315 Malicious code in @mipta1/yisadas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9763636cd5a0f6eab7885ffa612f1dc4816d320f32436ea39d37a714794fb11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159991 Malicious code in manuffak-angabofi-gun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e42ba9c48437e930a57e9589bacc6364745cc95ca7044ecd5e97846fedb2467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153465 Malicious code in avoay-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f94cd7146e2cc475388ffe4ae7478b1796969347b0f26ca8522701cb2b9efd90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-indtffsi-addutfdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210d098e52363c8ed7495003de4048011b37e59f13a8b86ece48eedc16e6dbc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jimg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a727ea716c6db03d2302ae2bce40fab835b2a24ac80e1a099ce6bfdf58612453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksunu-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13559aee79ac8ecbae6bcac82f4267b53a56d603b0c0bd848d63c4871bab01db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a476297f2249a8a0ee036c245e6567519738d1cf2c4fe1ca7a5098f5572f409c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161777 Malicious code in namadata-munaroha-munisfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0283b2462aab00d1a31852003808db96a3e6ce0d5d5bf2171d8d85686d673462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155605 Malicious code in hafiz-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c4f7f89517f8a744bbb82594d554d248e9580227f49b2fa02003e73766ac3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155962 Malicious code in ican-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef676b06f9f9a8886a6298ac13763ff32478d8310363895b172282ec2b28ce4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162364 Malicious code in nokire-arhani50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8d7b25dd27953e536117a1ad439053504af6491ddd67cef5e32714f6aa552d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157992 Malicious code in layla-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb89d187f152ad0d9a459760dcdbed24b0c0182e86b7e5065d69a7abdc89b7bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165258 Malicious code in ruji-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cd446a0a7e389993db530dcbfe49c558fc7206c9f56debe536619733bd7772b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...