MAL-2025-164793 Malicious code in rinto-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526a9b88e54bfbd92d70285320f3cdf2d3b62a3e7532b37fa32fd740f583f9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166464 Malicious code in sunderlan-uylud-vamknakiunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba979b6218f54d84a24478198adce8a9faec748e25787c4ccf29cfc55d27bc14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169267 Malicious code in trevora-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a23834d7df233ee2c0fac5c25a12f296f51e45a5540d92207b65d4e6c92b0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166338 Malicious code in sunden-dik-vam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e8545149de8189bbe47820357501eaf5e0c33769b58a77a45dc94f3516bade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169437 Malicious code in uafagarug-midef-fatusut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec30de3fa258792991431bc785851184b89e355635049081d2f00dee96c83173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164673 Malicious code in rino-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6edb0d9a4996418354ceebbcc1084ee26c94389eadcbe88ed89fa78032609a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169183 Malicious code in trevora-cir129 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35aa6eff79417a45e54f1fcdd0129121deb0fa13a68dcd7499bfda2f020496bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153522 Malicious code in avomainah-fragis-ouduffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7b19bfaa2c73a496ee224d9c5fcfea3c9eaa9ffc6c177c7db574ba90b7b165f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ec54c14dce5c425a195ddee454edde81c2afe1f460dd4e8e13fd7e1dd889d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31eb8009ea4cee5c7bd26ad84a8b168983f5657e195fa5dd3d71932ea606fd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c952a1776a8ebc9bfd25346c26b9fca654c00f6221dc4f52b38fa2ed28ea4fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95db14a69f2727e0f9d4e09ad88edfdafd24cb044f0446c6450d5d9c0df0539a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderan-udilsak-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586b9023f3f66ec30a9efb3446ce9ce147848a28dcea18d72f7146bcd6933b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotama-aaana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfab7c434f3c53dab8a55d764e57a63998d8b5eb3188f88d1e4f87526fb28fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d1da4918d1b3b6c0c3b9d218c40b0c2f2ed08058c146f6629bb0852e5906e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4f90e188b4abc26032e525dccca931c9bb43fbd3462ecfb8bb2165305725d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f7c4174fbda1d59b17a4aaa3ba42825cfdd6bea33d37081c18a753fa220304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edeae187b371e844ca18c4efa53b2df181a8a05e865c57f80f9859a44268ea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d38ba3be31b82adaa73ec5ca9c2ce83d1308c04dae3469984474c61aac77209b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayica-amalai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95dd8f45ab9d0ee97040f3447cdbc71dada0c41c449950de68b2692fc563a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...