MAL-2025-169205 Malicious code in trevora-cir149 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b125ddc1c8ae5a7507fd0b75020c384c78a3b86427fb23bc7690b35179403019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153656 Malicious code in billa-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87884553c12cff353be878899d93e9d82a22ceb1c8f0090c9519644a36df89f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165204 Malicious code in riyanto-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2c4e23123dd792be744d50d62ae87acf75547ef98683eb9d3cc1539f9d9b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160210 Malicious code in masiolan-ofi-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9984d4868c19007e9f8c07bff0e922895a1fd0577d23ea57fd7b4de9a843f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158979 Malicious code in madan-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2355f6aefc6a26fdc36eec03a9e90e61039eafe37151708adc93252e73fb9110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167768 Malicious code in teagood-sukuna16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c117790dd8acb6414aba2178815a785c8156e42bcda433708a7742248c54185b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161695 Malicious code in nabuf-otomian-nosudfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f97c364c2a0d96e04dde7ebe2d31872c0185f001b8a9919f80f478b2254d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164282 Malicious code in pitra-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3d2c0b11a39d81c4b5185759b47695b4306126a03a5ef475c9c56cfc367470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159158 Malicious code in makaian-aniga-ua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c7230ac43ff7cff5466f4f0eb0165880c1fcd12545deed440641913bce86437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164081 Malicious code in pilau-akabalu-kluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c791c84fa025ddf4a5beea820ba8f32adcc781d7e8d839b38b62ec5858094637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169220 Malicious code in trevora-cir27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c13984030ec8fb582fb859d8a34280978f9859d68485c68fb756b290b0b4ef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170576 Malicious code in yuda-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab34cd176788e365a3a652d0944bbab4691a6c00c67da665229685b2d330eec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160947 Malicious code in munisdr-nserf-asd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a2900e020fbf43847045e73244418ae18b59189795e46ffadc8af3e71a505d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164916 Malicious code in rita-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfeedc00999d06ce3d08e64939d775be9ae20bdd26790cde7b7ce3814e59ae9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155925 Malicious code in ican-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e3016bc6c2a26acf6c94ff385cc0549911e3c2267a95fcf6fc78afee8a9995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165802 Malicious code in saubai-nanliui-iuyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6451e90152b4bcc2054714878c0f2a23bb56a078703621bd37ea16bdb8a286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151002 Malicious code in @miptaa02/wag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89f1390bb10883d2a54ddb7447f4e64b025aad9b4e390a08661046c57b56efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155833 Malicious code in huda-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9037768b52fad01882827788724723884a4a0a97591b71184ee9b2dd037fee92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150052 Malicious code in @mipta1/iaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc0998e12ab7715d5220c445fe2e2aeb1bbf92aaf6e8df8716efc77401b6dc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169453 Malicious code in uafagru-musafie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de838e9eef4765d95276dc882bb61056ba1dbf4670790d8a77a55e2090007ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...