MAL-2025-166061 Malicious code in slamet-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b417bdfb1c248a29920845b64012882ec0e6688dcc489a4ce9e4f3dc883f2e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153074 Malicious code in avminah-fagiaas-fimokafiganu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23fa34d42e3e6928fde6715d00726361f177cf801a71c762157b4807d8e5534e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161506 Malicious code in nabuf-otin-agogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 113198e1113933c28b29a99c0b25a132bf77625f389c20e8cf6f956c3849294a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158272 Malicious code in lookingan-konami14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12f509606f4674588bf93fec6a0227f38515a44afaaf82ccd2920f83052eea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169789 Malicious code in uinsnu-lumi-kunal1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fca0458fb7dfe40e06fbba7f72fa5b5ce9eca61ccc49d6c3208e08d7e619575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165259 Malicious code in ruji-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599a12aa0d66e5b1c890849a22f7e05be96006d78cd9d0dcff24b8c413988e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156191 Malicious code in ilal-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcffa52c35aba8e1d78ff74095a806e4c29f8ac2f460666b21d5f057915ce401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154637 Malicious code in dian-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 365745f50e4bee68e543c70f2026086b7cec1fc596fd8c6c808c4a8025f1fe2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152285 Malicious code in alfiansyah-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c10a8df6d9b37028aa9e72023bac44aaed9283bb136729a2ac700c528674b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157227 Malicious code in jurss-zs-drs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6282f43859ecbf05910bdc973c2a6fb0305e6112b5a72c3caf1d11e90c736023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159404 Malicious code in manadsi-sdada-midada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c95d72a589c9a8c6375d4789c9c5dd92bb7e7da39100f5628b801b30660dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165151 Malicious code in riyanto-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef3c87bb4cab8744ad847fc934200c738e737d9ae3af1a0e1b387fd5518640d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159621 Malicious code in manda-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934e2ee39c1e23b437b629d821ea39ebea73109fd55069b2009ca236a5924aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151654 Malicious code in abyikula-nibli-luyipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3f4c986ceadd686ca4e4e28702bbf7e398d61c57f46a747c8a66ee7e623505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155483 Malicious code in guras-visa-koreas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 138a23e25d6fc65b0b2b5e7a08d64b289dda5e1188e8e0824f8f989aea990c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168895 Malicious code in technical-alobiko-taovlanaiban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053f641b2bc8bbf5d38b49803ad5718aa8c6a5a05f998a2a848bf24c3284418c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162096 Malicious code in nokiraifiagne-asaifafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38032e6669ab327a3e0b34c2d15e419f2fa45ce97602f521231ab8b93510b201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165273 Malicious code in ruji-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ce3ab0e51f4212b9deafadc79c41fb13a978ac3e0cb2c780ceaf5414cae3d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-enif-bulma-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce81995ac876d8def7a18811cc3624d7439b388dd0edecf100b7ae4c807e64b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-rehype-webpack-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0b6deac8969176b38f0fd93430562f99b91efa0466cafc73a3c3f46527705c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...