MAL-2025-169186 Malicious code in trevora-cir131 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6451cf979834e9ae00cb79cdf882f6f730b3431b7475ef37a18c53fc1f811f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164381 Malicious code in poliina-aiki-alai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd118f8ffa409cff0b5456a60a24a3123fd1b6231c61e2c0991e31203493861d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165059 Malicious code in rival-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27170950046e1b89157c4754977140083c9891e0618b711223a29e62af8800a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157181 Malicious code in jurss-gasd-as9as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf00ddd92bf410f41db4c0e66e72665f805f1ffdd93dd6b8b5909a8bbbf3c58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156990 Malicious code in jeep-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5f48a34b853a2fd32909fbda477bdb98f8e982657c85267c7ec18f7f26fc2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153759 Malicious code in bintang-tea12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7100e05a51363f839b8ea14a8929f0d309de1ef5f3471109ec0cef5d1669bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157019 Malicious code in jeep-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec2514bb1094dfb2bda162789792f398944c5fb9d8d7582deba14943da162a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150738 Malicious code in @miptaa02/imb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 119108ab6a63eabd17dc81dd058b69fcb3aa67fecad84207c8eaa1517e3b3de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160549 Malicious code in miracle-dokloi-ikauk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4536b10209e5b4315ccb145b25736918dd68e77a87d8ddcf02f768f89c27539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168399 Malicious code in tealove-nameka18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d147000a798703843e3ff6de6cd3d6305ba3fe3fdde8fa650ee9426fe74c8d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168374 Malicious code in tealove-naiman35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa342a38403f6cbd3ad00dc31b262e929a31760485a16e2918cefd1c540f8bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150346 Malicious code in @mipta19/asallajaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4ee23628f8975b32ff8b9ed96b710b7dfe53240a71c58cb87e9b7f9c51446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156090 Malicious code in ifargafi-gafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a95ce4cb28b9d00355d2e3de392ffee6773bbe93c781e291e8232bcf648967f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153945 Malicious code in bufpani-muisuayau-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c11628c8b13b837daf4b87caaaac05d5ff02c0cbeb1e8f909b724ad4cf7aa9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164192 Malicious code in pilka-luiu-kni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6777af48046ec63235c815ce79a8caac0e22eab26d2df8456eeeb0576490795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155540 Malicious code in gurs-muisaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34dc83e469323722db21e158b1ea04aa2b4dd177abca0dd6f3b20f1515134ff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169486 Malicious code in uaragia-mudia-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08770485893317cb4411d4dcc84b196807b6ed75d241e44aa4d32c3b16c8e898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159633 Malicious code in manda-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6209af701a75cabf5fa6c1f6461c9fba7e41d232b074ca5c6d8d2f5c051d3cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152380 Malicious code in alita-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a282689fd839f988b785c9b3de7d3302c3099f8d19ddc8a92bd6d84756e019c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160590 Malicious code in modirai-fia-jasatyfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e4eca37f82939af0c7c1a14a34164e71042a431da0277bcfe8e4f2abc7fc69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...