MAL-2025-169307 Malicious code in trevora-ggissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba51a58c70db5858e15bf1f7345881fd776499d2f575c0353bac38ecfaef4948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168984 Malicious code in tehah-mansaat-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb68f43e462a4c368e122b0abe6de6821eb5b9f506214bb37f46a2a9e002374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151791 Malicious code in aiboa-milipe-apamumpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511dd511ec27f0d1e2882ea6ccf5e1b8922813793a2794e2f8ef3516b9fcb649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169984 Malicious code in uinsu-lotahmi-nalu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a447a59b4fca441f081bc82528c21bda4451334ff43170c7b97e7aa874c135a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157116 Malicious code in juris-frazs-dgrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea4decc0614d6b102f205751d3ddc4ddc4bcceaa2e875aeb4496b79e9ec3fc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156262 Malicious code in ilop-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa471e5a54a351be2f9471640d90aafeb53d317765227fad51573989f840e342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160820 Malicious code in muklis-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4737aa42377f8a77f936f9b639174e449d29eab5926e8a4de24e426f0a4ebf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154547 Malicious code in dian-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273f48b3e2c92a516a2122517ea928e069cef2cbde80852286ec7ad785f1fb99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156945 Malicious code in ita-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855f7af76d87257fde0c9e812c51e8f12fe6cf65181de7b32ca8d6d3e6e0dd26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150036 Malicious code in @mipta1/gqa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fdea1cb25b3477dfd8f78a44abfe9c67c1dbedded2d2e64ff13e0cd8755482b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153972 Malicious code in bufpani-muiyau-fafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8295734d6f48bf337ce25206b95088433923390fc8c00895c9be2bf743f984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157186 Malicious code in jurss-gsasasd-10as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b49225d154d6b433ad1d0b78cc0cc591812621efd8a97aadb22473d1851740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155635 Malicious code in hafiz-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e410d9c4dfcbe14f052055674875b836af9f7c1cd0203eb8600e91166b03d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169033 Malicious code in tehah-nutafday-kob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82369d6bbc04645650f153877cabe29ba47cb85bd7ef25f155b0c399cd09d0c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150706 Malicious code in @miptaa02/gzedy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f2b48b0cce08b5d1a335831b8a14106b26b600a2371f2c457fb7e90f473cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151309 Malicious code in abibuna-mobiule-amamiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db4b1ef6064d286f69681dff8221fab324a91e5406080194ddddf1a32facaa1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148411 Malicious code in swift_dragon_green-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b51fb18bf8430096563d6f2aa932669cb667a1d81503b210fa97f967a97e3f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149902 Malicious code in zoophagous-coffee-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a39e55430d666ee64d48b67fcd7913f31dcaee9f2e68464d65e3ebfe72fc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-release-it-halley-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6398d96b583df5659abde30c24efdd2a4079e89db4c12b764d5adab1d17b39ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-lyra-nextjs-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d673068fcf9b21a3d597a451846ee4886f0d517a03798c3d94fda72e0283bb79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...