MAL-2025-169194 Malicious code in trevora-cir139 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfe12570fa245e8f6ccbbaeb26641136658df1f6910deb465bc1398ce2f07f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150212 Malicious code in @mipta1/sasswsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b65d8862840056829beee1795bde239d8c7ff1c1dc0b0021429587301d3b624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165523 Malicious code in sabudaaopa-muyafig-budfaiufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b426d68299f061f47e865f38d4f9684cba231e1b8444fdfbe0dbe6f5be5a3e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162219 Malicious code in nokire-akaza1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3249cc3f9362246b3619c3edb042ced732ed50d680ea3629355ebb40fb9b353d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152729 Malicious code in arif-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffecac563896e81d8eabf809aab1c54fb1f4cda0e7efab75d4aec284581ecef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153704 Malicious code in billa-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3450d754e526cb305a74616b587fe87b080c0812abc502eba1a8337cb2ae485b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169989 Malicious code in uinsu-lotaihmi-klmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c9088dc50614e65fed5bef8ae215765379084e7ac1b5783b1239f33931fd91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159206 Malicious code in makan-aiuga-fi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6cb2fe9cdc19a8938a2df33e9010733ba0ebde2d7ef5b166c76fadb0c26594b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159263 Malicious code in makani-aiavamoba-ufi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e1fe09fd3fb55079c96214d03969d50a7a542cc686342b56b3d5c565c28fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166215 Malicious code in suharta-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6d0fca78e9d36fe89e7a0f878be8568f8490e27719b3310f5837b7302ac943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170563 Malicious code in wulan-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a99cdfdfc8b142af37931918f2ba69f40db974d0a1457d6a2bf9388ca0fc520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162076 Malicious code in nokigragne-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f0a98ce55f7a5e0476f2bee8aa563b38de0587815579e34a3ad7f2ad3176c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165973 Malicious code in siregar-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a076410799f156aee005e77b3f8b21030803355b271aacef11a0564657267e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158279 Malicious code in lookingan-konami20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b22dfba2db354db6150bd93bac5f993e867fc7eba76caed312a905117bf6870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164456 Malicious code in polymer-intfsi-adutfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabb04e2c739d7a97cb9a91572859c9d03f46f65d775b090094747ca562cff6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155105 Malicious code in fitra-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466b28313e39663d135f2ecaa0f25184b18478be6afd0042020725fec5e8831e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150489 Malicious code in @miptaa02/aib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4fd00446334b039dfa70359c63491792b31ae4fa6fda5cd0b529c7606473f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151265 Malicious code in abiba-avbai-au (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48d057830105d4ecf5f4d813430008135eb133f92f13d42547d8838a184aea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167655 Malicious code in teagood-nalikoli95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404063514e61d430ccf80dea6660de6eda32867755942c05858ed5077f289297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156095 Malicious code in ilal-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cd6543a1f33a5383b893d056b7cefdee956d61e94a9e6dfed421c29459b0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...