MAL-2025-169194 Malicious code in trevora-cir139 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfe12570fa245e8f6ccbbaeb26641136658df1f6910deb465bc1398ce2f07f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164758 Malicious code in rinto-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27875b75c1fc91744752e50c1db0e22971a946aca6382664294537f726e1debd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159206 Malicious code in makan-aiuga-fi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6cb2fe9cdc19a8938a2df33e9010733ba0ebde2d7ef5b166c76fadb0c26594b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166388 Malicious code in sunderan-udiak-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ddadfc95fc3051a54c734bf08fda1a31fcbcc6660be256a507cc0e517bd31a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165215 Malicious code in ronaldowati-cir11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 152a7d16734b9a5f32dd32620e900f461ef6aad96acc6ff36b247e30ab45bb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153742 Malicious code in billa-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6028631a31c8cd1a77bcda9320c50530b8dc5ad827ac78e84c6a86f30edc0421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155123 Malicious code in fitra-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d6895f1e826bb9bbbc4043b2c83786c2be92b105f996a7988fbba3d6b625fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150293 Malicious code in @mipta1/tyua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d313664b07ab718c4effe676ae862a48f5f52d93e8cb2a4893155bfca998a087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169989 Malicious code in uinsu-lotaihmi-klmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c9088dc50614e65fed5bef8ae215765379084e7ac1b5783b1239f33931fd91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168728 Malicious code in tealove-reborn50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0ce6ac77e61309eca464b3d0274739aee865be04364d7956ddc3f113ac6564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150815 Malicious code in @miptaa02/lzkk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72cd1ec845b8dc727e0e9e15713022c9d856cf2585abbb889efb1bc29cf21e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161551 Malicious code in nabuf-otmbin-nuyaagfad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bace9c5f3c0510f3d2e8152be635f896b459de2e9db3d0ed7ffe0e98063251d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168508 Malicious code in tealove-nice3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388103a90964a2680badc7d8c2a5495e5bf7fb3b33c03a9725e12736cf0ec9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164303 Malicious code in pitra-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94598839e52530969c0f1168a24fbdea695055304cbbbfd2865cfaded98aa75e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169115 Malicious code in tobr-naughty-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e0a17683aef1e0280d5ad1295020d42d6b6cdc35877ef472ab2e8846463132f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156322 Malicious code in inagi-vma-nuagbarifvua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d57602be73c1689a9f7448f5f0059c89d28330c2784e41e592894de100851299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153408 Malicious code in avminh-afgais-fodafahog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0b630b45155dd3919aa0bda140d6233137a4afd6b181a8f4e874613dd5b2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168113 Malicious code in tealove-aruma9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da210d90efa282fe8160756200afd1912cd237e0a7fb0f045501ed5303605f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162343 Malicious code in nokire-arhani31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f0803c4902a220f620f6689bb4a3db2677a651f0cf45688519996ea7c4925f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154235 Malicious code in dajouka-tsfdaa-t2a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba5333a2fe0ca7dc1465c475104e88e1d303e3c42b30b225a911b29cc90bf3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...