MAL-2025-169297 Malicious code in trevora-cir97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d2df420af7db4630e3f8e2a37e88372cbacfe7188f9627366373251356b794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160642 Malicious code in modirai-igiafo-jagagigg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8870f0c8c9146f98f05283c1d1059ad39c81652a5ab378caf8805224ad8670d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161297 Malicious code in nabila-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7813bdb41a5bc0f984f70e85b86476d5324aacf0ba35a0ca15b9844eab03bcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157860 Malicious code in kupa-lubilio-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3845a022ddcd7f41715372477ad4bbe1cb90fca261022abe848f93a097d747f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154626 Malicious code in dian-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4c065b09884b5c9ffb8c8093af6cc828c84dcbead4f7128c06a754a6a40093d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161660 Malicious code in nabuf-otomabin-nojsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9225365a6be6e830df77b7099fee11347a8060536033ef3a3018805a67231196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154490 Malicious code in diago-kulp-kabamkuoloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566d7ff471ed79afe96083090ca04d0dfde6d10b192b1861cccaf811267ff535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152283 Malicious code in alfiansyah-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3412c31f38eb3f46261b1165f6c7b01c31fc18e4f743bb689380f483d58bdb64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162923 Malicious code in nokire-loklok67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1c9fe3ad04292bade10206a55b370b3e809157875a84f28e68e3b06a69542c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161716 Malicious code in nacho-buni-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b3427dead7d12053ae8873d1c0662d876f00e0adacae41ad4e09207f4aad94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159613 Malicious code in manda-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4d8f190184330c5a4d663b50b9efc67aa7ac3797379bda102a0b4c18c96eea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164201 Malicious code in pilka-luniu-kanuaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01c24e8bf05af404ee5b8617f9fff997d51745bf645ec383a1754b01f0cde6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157327 Malicious code in kamasada-nusata-bunjsadab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49a7dce45db82401786f93a934ed9125a1746374353ac9fabf84ea6fd054d23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150609 Malicious code in @miptaa02/falak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de7630c2b5cc60ddc1e511bdc8214a4222fc13bbc67405092816785a9700b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166701 Malicious code in tea-osss-tepan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 165bb57568b88ab88465b36a7451ea9e297f752b9285c6340f92b6624d4a9c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166629 Malicious code in syahmuda-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 149783cfb7cc60fcef7ff68e8dd68ae1d8b65d0d1ee27d74cec08a2471aa7978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154911 Malicious code in fadila-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f53ed37c9bc79b9476f5415923c6447d11589811f08a48291cce00395c49f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152497 Malicious code in alvira-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e7c0366776dfd45367ad7d710510e7c175cbcb5ef55babddca83a6120255be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150738 Malicious code in @miptaa02/imb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 119108ab6a63eabd17dc81dd058b69fcb3aa67fecad84207c8eaa1517e3b3de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161138 Malicious code in mutdaufs-nabuta-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34445343b2a1a259f5d7369872514562d1a3ae8eed22389a9f8cc4f223851f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...