MAL-2025-169157 Malicious code in trevora-cir105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd45d584cb4b4289c4dee84dea65891e6a5782d3f7d40e01813576dbc71b79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168303 Malicious code in tealove-darknest45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5cb8fc578a5df7d208e741bda296aad686ce60a2a399c4207aa77a362052cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154123 Malicious code in cinta-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bad0cdc649769345341178fa6ed94c39b4b695946d31abc4b65b2149555be4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153943 Malicious code in bufpani-muisfmyau-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528001266030d717be28abea8e639478a99b7fd5108efc944aae3db4b87c73d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157168 Malicious code in jurss-gasasd-14s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e5d97d87cd09c7931da47f1e11e7708b9d6e341634d20af40e75966e1c1b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163892 Malicious code in nustar-miuyu-muaivcacf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c03adf1550a37809e5178e83d9689557e35fac40fac2b45336f3514f0be2d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150448 Malicious code in @mipta19/slv1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 571041fae47cb37a94f3b38228a76e1e6a9b3e46ffd0b2074b00334dd5bb5453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152106 Malicious code in aji-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e71c1c03142c8a5f21ee78753aab5e036549665e10aaf2bf84c0882d2f671591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160581 Malicious code in modira-fuhopia-janis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2043eee3eea2c1261501789aff17fbf6dbb4a04251535c757067f189bba49f88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170173 Malicious code in uyafaru-tauimat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a54da88919ea5c3cecddc6d600ff9851d0bc84b71676c47fc55be6192e7de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153173 Malicious code in avminah-fagmaas-adsia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661767970d0a63a304553d8c2c7746c2968aff720978041ba643f2a7bcc2d563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168236 Malicious code in tealove-dana3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a16d0f3974e9f0707689185a277637c3d97c25caf33f48bef5845ad32694da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157231 Malicious code in jurss-zss-drs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a2d303602ab6301883d6a58fb9450b70ecefca7920fca2e4b5c5b4cb1d49cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166492 Malicious code in sunderlan-uyud-vamunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12346ef1a7879f907358e256a50a2e1a7655d688b1adcf026af0c75c25983d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153775 Malicious code in bintang-tea27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00dc749976f3bfc7c44c0a2256cd65bd8f8cbcd07832cc996fa9839ed2a969dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167017 Malicious code in teagood-lokina51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a261d538b52f89870c4316bc0bf4974990725871769e03255009fac5e4103bde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151718 Malicious code in aciydua-idusut-dar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfcb40c3de6fc72b1c07dad95d73440aaa7871384b34167658713b1aa31c11c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154681 Malicious code in dioago-kamo-alauliaahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a272aa679c77568b1c4a0328619abb368c38a5744d6b0cd34438b07f7edf8bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167099 Malicious code in teagood-manaki34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89d729bc9dbaa0c913fd247d775686fd686f8a23327abba1540dfce6b170f3d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160744 Malicious code in muda-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb846ba3be78e9278978e375368f89bd612ebcf9703f3c89fa068dd9eaa777bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...