MAL-2025-169233 Malicious code in trevora-cir39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e5fef1f356fae4d08c06702bc43d4de0d0bed77840c78a58da6edd0853df4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151259 Malicious code in abiba-avbai-abunahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a79ec08a947f9f42e0820ae37852f0771cc4a66b79155edcce3c7b1a13c93bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159343 Malicious code in manadi-scior-nasuiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eab0a69c06132e835168a64d1cc6fc784b9a731ef3e611a4e74e6bd0a699dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169484 Malicious code in uaragia-mudashai-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d993bec8674f897197b8d776b05d780e6ce5e74b16024fac6b06f55328d17d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160666 Malicious code in modirai-igno-jiamugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23b941f63fb4f7835e29d4ffe92a311b38fa66fd91237cba0f9292501b3fe12c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152615 Malicious code in anak-jalanan-mdn1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bebb26a48737cd63b09ef95b48bdc57211b3147c53b1d1401f910b82baf6613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168997 Malicious code in tehah-miss-brew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6364e580110437bd7100fde088031eff414bb60eaf500f386dc6a38939cc3450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153693 Malicious code in billa-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e6785301b4501e714e5b090c825552bd4ee4c4ec7fcc27bfdf5ee6e89f8c09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaihzmi-kulabnisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57f679201e9afd4135acc6490c45674fedb7a5c5569d94286cfc521a53b96a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159768 Malicious code in mansila-iala-maonldzodafuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bb6e52e55d2195f6c72ce9cf37d42a295f618c51d2f082be37a292751df6ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164240 Malicious code in piluka-kaialbu-kiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe28014b883758af644a3142022c5a929a09eae72849ca440759351a532e153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154532 Malicious code in dian-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a563f7c6791d179c73816eba10ff7e34e9086b9906d75171b26dbbc5d42903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168400 Malicious code in tealove-nameka19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3bec11dbcf510b4446a85973bd4ef1f5c0fa8266bba25df447ad8dae0aa5071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163179 Malicious code in nokire-nana27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efca4862fc50f6957185c0ca3ac25454d4c7d3b7c03e00f04c2fc1a9624f3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150795 Malicious code in @miptaa02/kkd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e36f16c35f1bb56de50ba482094dd366de6eac776f6aaa140dec32de810318e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167295 Malicious code in teagood-nakamala31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d2640ce1e717e597f2411d6a9185a997511d0c44c0bc881c3bed3ee0de3e88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154745 Malicious code in dioalgo-klp-akauakui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085458f1c1a577f1bb8735855c636d07c26a8f1366a2df9d063c685eecfadf26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154489 Malicious code in diago-kulp-kabamkuloloima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031de12c9747c669e446611764e972d0f96c32ade52f035ea6ce5788988930a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154485 Malicious code in diago-kulipo-luookafamauahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa25866137bb9e1e578ff5271b4187671004554e2307bc73ab65beeb4acb39b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156246 Malicious code in ilang-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67ee934a65dedc4c564c9371129ef111c64ce793a682bde0dddb0cb0a104fa2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...