MAL-2025-165078 Malicious code in rival-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e831420a3c4d6281e04a7c3898da3f0c7dd08e3740a732a53c9fbe7e7feab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165050 Malicious code in rival-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b4d4961c26f300759906350a219b78e27e900ca14a75077e2c834a70b019b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165085 Malicious code in rival-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029da1546e03295e8b4ad8f111a87af149f1201dd69f9c65b23dee13ae2235ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165062 Malicious code in rival-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1440a6fa766aff512b1de981261b85c2f2b91fc24f5e6b785a73ba6a8a23b8d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165033 Malicious code in rival-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7defc4f96e63f5331ffb36c524f682defbc229f7096a21db2b45267f355d262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a1753769fa99be19ef590bddf7db8b999bcdd0998ea086679beb958a6a253c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b96efe30a321edd185528fd732979519a77313208180ef7d6888b58968a327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837d00ef1e53e1eb6f32406fbb7ca40958887a2685bf8da58eec7746d676d215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b089765145552e271c9afb51aa247679919740f304d972393e029bd3ce8cb96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f10fcb966718d85921e30d2a9667716e45fb364deb11fb0e280e44b5446e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63134ba9e3325a7055899f2eeccbe34daf73bff1bb3963d474c9b3fc1fda5fe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a53ba3ecadb935d8b46975475c9c67e1efea981a035d86532a2d7d77a7a541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0777f156eb79b8ffa1eaccd4dbdfd83077430c81a130e7a0c5acf6e5a148065b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b094abba05580234d6ebc75441812ca28435bbc1365c8fbd57501ef414db2cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b613976865b7c18b3c33029805d51be2c62abe1c236c3efd1b0077be08b2b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5af8bdf1f6d9383aab9504a1c9ea5186d41166e2246208590e1681b270ee53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1e4cfd0174d5252cf79fec5061077b2d20c7a117cde59de86de734a86238a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d04b471ea753cf19c0ce99b9e790c8ed82a3b5c583945ca8664e68b4c8c7d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ec9879c4929e3a2a7990fd0ef81d75a00207286baf098368f42f1cb7437938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165022 Malicious code in rival-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe574775a6228071481c64a2a0908e479d4bb15d92f9681ab86f439a0fbab5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...