MAL-2025-169337 Malicious code in trevora-yisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31068b15ebcde648c5be2ea9d780811c6b89dd1ab9b5c2d21b626c2721a0f41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155996 Malicious code in icha-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e290516144637dd9cf0f307f53c041cf5b7666ca641650d06c90ead7d1246b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160558 Malicious code in miracle-dokoi-ikawaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb086bc0c92fccca3783bb960fecfc4c6f5e9b2f50f5566b8250a61cc089001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159599 Malicious code in mand-nomi-munau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad98629434f7b199616ede99bca566c17655fdc58a937b075fc21739b2c473ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153670 Malicious code in billa-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6881f559ec0d21150806151bf41d27a9f6e624ee0b1b23136f76af606d7351c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158492 Malicious code in lookingan-nalako79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28f592533a932d9feaecf82bfbc6e6150c8ec4c0b2b5373d060d0a5de4d0f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162298 Malicious code in nokire-akaza81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6db1ae1766f210273558146c34626504802cff844501ec740208bcd07d724da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164116 Malicious code in pilka-kali-nublikvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec4831495162f1c585d1b81cf367071b51cbfaa16310eca03fd160c721a569f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155262 Malicious code in flight-dangers-fanthomia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abed8d972d7a71224ad802584803cfc8d444497737560591dff81bd560e18e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150697 Malicious code in @miptaa02/gud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4cefbe1dba166156c538b31b477276bb5faa15a5d510db5d60ca679a7260fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155846 Malicious code in iba-otanai-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eebf1a93f684e4cc5c0cc9152898129827c391ce65685b05fca7fb79b8e01cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159797 Malicious code in mansila-tfla-magaziigboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75a184ca91a0f1b4a793c77387542e882beefaf7939b831c410e02e9718bfa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155914 Malicious code in ican-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4503ac14cd9286066c4d82f22627968fdc20cad853b7c694e7e48ea0dd69e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169345 Malicious code in turisna-reff-derfueaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb6af53bec2ab9ff95286fa12143664b387386a82064ace16097ac65ea3c3ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158119 Malicious code in lina-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664986ccbe2eec315fbf086e5c4e9da923a614321341ab59144e22b96d7ab65b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169947 Malicious code in uinsu-lost-diunst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8548ef93d75be2d84a8e77e6a1aa634c95e66a1eaac4178df0666d40c61f8d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163913 Malicious code in nustr-madssadn-syfahdmuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e707a8889f8700513c3d68d685e17b431c36b38967f118a1a835d5026807c8ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157809 Malicious code in kuinsu-uiu-vinalimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b389759810716cf65f400936fa538df7f3139ef6d65cd6eb35e3b9b3db9bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154858 Malicious code in fadila-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7788e5c796843b69379495ae7cd2d4e0c9594a61434045c326ecda063e11310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150896 Malicious code in @miptaa02/ramyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592b8dd7a082827fa6e72eb1de6472952a8359d63f3e281b069301f4caac3b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...