MAL-2025-169228 Malicious code in trevora-cir34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63dd39901709edfea0b4786328740c8023ada1f806cce68c012b015017ecbb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150527 Malicious code in @miptaa02/asdzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d109b554610e71bb5c96f75c4aebc0b256f289af7570e2c791c34e16eb8dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163839 Malicious code in nudela-rahfeg-hahgsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3daf0b13b3fc29bfd620ff12c53f9b54d2d182cf9191c5b6ac76b4e52d69f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165753 Malicious code in sanctum-ref-raimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75671ddb7f99123fe01dc038df416bc274a5e96175b624164ddd971f0bf2283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170229 Malicious code in uyifa-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3b32114a41e4c584fac7cd1d40479433e7444d9c1f4ebbb441f1c9ebf0ad96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169334 Malicious code in trevora-nisaa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e79b3f1b5b64a869bd0d90b04800933f2a3926d438398dfead0cdc09c24a30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164685 Malicious code in rino-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd093af895f7562a2b62d704d301258d53159cf3377cb46eafef14f63d1a6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152546 Malicious code in alvito-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0072c638a4dd3d63be726b44e6756d70900f4e82d028ee7ad0988374128eebd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153075 Malicious code in avminah-fagiaas-fimokafiganugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae1e2e4045470840041015abda9fd61b357938149478c6688d8324e2e547f39f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154094 Malicious code in cinta-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bcd636a261d212129275a49dd602623d45fbb31d2ba96313b1b23015e6234b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158824 Malicious code in lookingan-namalaka15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f45acd51aec5da36ea52acb6543435fc240da0528197af653f41f4914f7a692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155971 Malicious code in ican-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c010faa4849f0749b12a3e7d5b986048f4395acd4226164cf82351385d9b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159428 Malicious code in manadsi-sfaddia-maraida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1919f73624e6c385975356c53b20b1fe426a44239491ae82c5b2b95a22fc4f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154716 Malicious code in dioalgo-kilp-akik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc3109290e0d5fc39638e5797dd50499fb40a2108dd9f00bc13dd0cc179947b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169417 Malicious code in tusya-fsd-frsdeaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 953e652e356eb427c251a547165fc633f760d151a8733ee2d90c37a7bd15fef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162505 Malicious code in nokire-genji19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c1574f9336b8e61d756ec719367753bf45328dc1e5353ed32c792bf8b5dc56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159185 Malicious code in makan-aigoa-iadum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f77629df2badc3dcd66d2003cc818c52c1861a27afe6c69aff736260d7df898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155270 Malicious code in gafvoay-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe37239d1278da8aca456247a4834a027ec3cedb451453eeb9930544659e82e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166503 Malicious code in syahlan-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f27dc0ba7bfea99dde2b18655ce4588e557e15df42814ca7ba6910ed7850f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32fdf332f4019746d3851dc6c3b941d5d163e695be2a7efef659e25c6a3a9774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...