MAL-2025-169232 Malicious code in trevora-cir38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ea660cd9f43a8f4992c395edfc60376d3bc09bd01ec4733ce50668ec501436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153869 Malicious code in bitha-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47998dc1cb0bb6d7e4bb95eb3f9e9fd7f07acaff40426804e8574f5380649e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154828 Malicious code in f-bendera-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6076e2836af6edbb4a2bf6805003104f5f4d67a0b00de8b383c3fc0b0500eb44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163598 Malicious code in nokire-zenitsu12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2195a24393a933a039d91fdda477ac837d7c88586249711825cb0f87748b2c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161577 Malicious code in nabuf-otogfin-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0751b32443f4b5deba768fb489fd5446b417dc2a729c70f8b243fa61d8d3ab51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154527 Malicious code in diago-kulpo-lukahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6bd981bd936913b26a989c37a93a1153ad9f1665629e7a7bfea3713caa2f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167120 Malicious code in teagood-manaki53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4facd1358e005c82a1953914af8a11780019edf1b992dcb01a0f33ea33c35973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150941 Malicious code in @miptaa02/sdfgdst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e732b94c4fd8e8b3b9cc2d0d07454f732b7f106b5582dcbc84a07b9a20d9513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163441 Malicious code in nokire-sekiya50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67990b2c7a930ee99cbf37aae25dcb9b3c43f9937af337fea558a481a78af5f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159540 Malicious code in manaf-masaya-nutsy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9476d9559665fe8e58fbb6c7fec73adb1d85300a480e2aec88e3dbbd88fc31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161005 Malicious code in musasiak-butsd-fatc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 625a92731874f39849bbc99b9d5766da4c043bb0506eccc4ed63eb2fd4a31573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166407 Malicious code in sunderlan-ud-vakanain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dfc6e40f7ff8c87b4aa127dfd6e79e1e43978d12fd19dccdee0ce7519d63e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160046 Malicious code in manurung-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02624ad74020350b6585078a4934433841c833bb0a990c7ad901c8be6268db7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161636 Malicious code in nabuf-otomabin-njsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ecdc2fb593a4e7c053995150d68382b9c22f55498167c316a366aac713532e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152542 Malicious code in alvito-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e9b4d15bdd3a49fc002e537f38e6d4b327cf18603276d532d5e07e7550b23bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167617 Malicious code in teagood-nalikoli60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d835a2439e8e760ed809bb5f85253c6f651edee67aee376bf50677e9edabe6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167270 Malicious code in teagood-nakamala1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f4d9b3be49c79a353a2175c8fc3729b06483224af2736199e6e9c220a587db8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162753 Malicious code in nokire-korean3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb8f5fdeb07b16a22c1ad137a7182c5d1c8db347710190e3a0edc1d2ce29905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164054 Malicious code in parwo-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf1fba8a89f7d4bce2e1b03dda3497a46659d433653bde9c1d97ee99fee0ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166006 Malicious code in slamet-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd4509c391a09239ff49d99d988d083333980e1dd0da2ec96910990564657f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...