MAL-2025-169281 Malicious code in trevora-cir82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c2b41df39ae17e00a34b9ad057cc496f5a91abfe41274415645caf89cfdd52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168939 Malicious code in tehaah-codfd-nutdara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ff1d6ff69fffee1ef03e8cd25e867c4b66a8787e6789f9d4198730331d1011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169518 Malicious code in uaragifa-afati-urufuafayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e386519295be1fceff16497e7929ab0ec7108b32efd0a86c40f866a5a3e6fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168370 Malicious code in tealove-naiman31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90552f97c2b5619b8eee8c7f82dcb83baf8060e82aa2aac5e477f7739b53561f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162274 Malicious code in nokire-akaza6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d2a40ed9f44b30ba1aaaf2d470047f6f9a74a5afb33c7d2168eb021325b650f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158665 Malicious code in lookingan-namakita53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30509c490e8f2112b57eca8930e160c2af0ed7ed1a7defbfd88f77785ed2e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151595 Malicious code in abuibanua-mbian-arta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c93f412e659323e704a38e15f3e7b1ffd10f998bf13fd2d8c2012972415229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162612 Malicious code in nokire-kilua25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0caf0e5601d912a1af8f9a816436ce7d612534ffa0f05b60e3b3b2b2ede7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb15e2de0dded4a526607a38900bfa3ca603d932153e155516b48a2934cd5cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156120 Malicious code in ilal-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445e193733809ce658d21380c60e61ba5999aad1642a430c5c0f94fa27136c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ewias (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a60cdeb026fe07f6c79c157649ac670247c4b3ba010aa610b4c931018319c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-ad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731ea733ebcc6f4698fee51b9d008288050556c93676dcd327eeb7a46ecfcac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72eb915230558258e1e43ff3fe8772e19e47b0c7ec082650447781f5a55d3c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170566 Malicious code in wulan-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e121b35a787253d269f5ceffaa5dc7482bbf4a3e685b5efe960c8e60fae67f7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169680 Malicious code in ucok-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd16ca115c9597e27267d50f94ec682614a55ac065e9dcd0dc09bf98ebe3f563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162938 Malicious code in nokire-loklok80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2307baf7f2a082b3a05d32f69569224a60ef02e996946cf90d118dee263c982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151478 Malicious code in abiuba-avimungi-agi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cc794ef4a65ba408422a22c95a18aadfef575dd19edf4ba13be04a1db5f3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2f29e34411603cbb9953b6a8518acf48e52914e153221849bf0e458af681da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-native-quito-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60bb1878c8530d69271cfa996a528baa124dbd611971c65213032ae04e9f6c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-ceres-element-ui-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979a077177e77d8dd179974db351f01ac49b8fccde97b9a54405b9175dd8ac2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...