MAL-2025-169151 Malicious code in trevora-cir10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc960ad010f728c74c6104bf415b8cc66242f791494009d934891cca66b5e866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168862 Malicious code in technical-alin-itubauiail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59416d214b4ee573c7452d0e135c71c4ef9a327918990d25c89625d2d17fccc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163199 Malicious code in nokire-nana45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9975e48fa891dd3fb7b6e300fba689a1c118b1d280b18be2d2a5731d37d381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152504 Malicious code in alvira-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5179dac34e3616ea6c5a3731a5b54e9ab4460a81546c30465658f2e4470c8d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155208 Malicious code in fitrok-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1be60373352517339b6e271b426278e12be48d26849792f2320e658acc84fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157190 Malicious code in jurss-gsd-a2s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a39557684f89e5e1c44e85cddab7fe0f42405eb40ff551f3811875a5c5e0d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154072 Malicious code in cinta-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc877879a6bbad5de21401b5cb9b57f55cfd911d43f6fe94692b16af8bc2f88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153920 Malicious code in bufani-muyu-bfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22d8ab5ab683647aeb7e6567cd6447eec6b198d984606dc3b5e0f9b93c96df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160079 Malicious code in manurung-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf05523152229f22204c7aa51252c1524a04ca720f5ed134040e2b8a6480a41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157781 Malicious code in kuinsu-lukoi-natibamabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425f07ba74e977e294fee255a8c76358007af7d9b344642859e79ed8d5cfec9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161555 Malicious code in nabuf-otmbin-nuyaagfgistad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd02b5c34fb37010de873e2d5e9082bfbeaaf539edc4d55cce974392182b4e3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152675 Malicious code in angin-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae12510bb206b3600a2bcc63f6c263fedda6b39001d96a5d89001fbc063dcb2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150865 Malicious code in @miptaa02/npd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2865ed7848888ce2586cf2eca90818b89339dbfd6ce48f862fb184afd825c365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165923 Malicious code in shilang-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbbe5b328ff113f16bca2b9ae5c29bceb294766d5688f78b26394aa57002e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163366 Malicious code in nokire-rara74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d48666a7c33cc10c87fc1bf9b3e9850ebedd57830a1b0f3230417ba7df7e95f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151576 Malicious code in abuh-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad5c9a4003662c9715adfeb70a42acb14c4b7b1ba5882e2387c8a8a6cde1518e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156795 Malicious code in iomodra-forufua-jali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80d7092fcd3ff30b2efea65de11b0a40779151592694db8bda1c34570c8409f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168461 Malicious code in tealove-nanami31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 326109b0527a50ef6ab05c52baab3e8b8f68541d0f1d596b6a2f451051c962d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150093 Malicious code in @mipta1/kdadds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b240a7f5c268572345f7486871761114dfd600c8b2f36de3b3649ac51c4b53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165648 Malicious code in saku-aiu-unian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82f343cb5a6131970dc9c147c702aad678f65e10a84976ef74b835a324f519d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...