MAL-2025-169193 Malicious code in trevora-cir138 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503831a3fe4b3f5bb1ccaa546ae045def12e9e048fc03788820f0c8c3838e38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165668 Malicious code in saku-aku-iu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435ef981b707d8fe5634c7bf55e7a45abb2d0be7e59892fa2f52e071c83dbd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154726 Malicious code in dioalgo-kloip-akagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e09615d51f2245a976f14890a99d0bce8051cf968147e98f1a14d766189bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162374 Malicious code in nokire-arhani6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 299093028ce9d38bee79a6307a59bf6dc7238153b4a8b73759f1e594ae48edfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164701 Malicious code in rino-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4cd862a45e486e4db00f71aa4c7c24a4a3780f5e3193437843d46a10e884b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159202 Malicious code in makan-aigooa-iutamafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82846f411b9c7ba4dbfa03aa511f706105aa1107c5913cf8909f123050ea3b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152375 Malicious code in alita-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b3a5b3673e56190105951c9d7e5cd5792f17d46c41e941c3582d2973536e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155254 Malicious code in flight-danger-fan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f414f121a3999e29dccde778c879db57bad7c9f22d2eeca6d38ca8199f4b7734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167488 Malicious code in teagood-nalikami84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8027f47b34e00b17bac44a76c02d2debb90a816f255dcd58d7952214c3a91694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158198 Malicious code in lintang-tea39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582213c32d39b929a886394090481a310339b0f581ba2df07d5a279edd3307a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168408 Malicious code in tealove-nameka26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dafa3baea5e8325ce4edb43e8ed928576d430739bd62ecb116cc7cc25ec3c43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159624 Malicious code in manda-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce4500e1e683f508f01c74f0fe9148f84bb3b0aead480a3e1e6dbcf85f8e284a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170396 Malicious code in verify-ayica-amali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2085d3d2aa4816a052b7e0a4f404c367bdafdbd859ea1bcd2e89482efd10747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152649 Malicious code in andriani-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0368b4524fcdb4d298d78d38da1a9faafafb732f45843a793f083a42558c0603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153657 Malicious code in billa-101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0dc56e7e0462f9b8d816f9fab45b6a5f4cdbc5883a99a0ea220059b78e3e0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168329 Malicious code in tealove-lady23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f1f5c6bd916814ebe6d49c8676f4f4918953f02d6a2ff57b84d0dc3fec5a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162350 Malicious code in nokire-arhani38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652916d59af648b1276c4cc919546c75086f97a1f423095457a2861de3fa3547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf3696e675762412d56e4f19190f1888bc14e72d0ea8a7562c36e2f7f37ca66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7c0751410ccf393639a0a2fc04e6b4c5e410c53f0beb573e4d8c90a0ada37a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-moiule-aro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cafc1fa8fec95e3a46158913e70cc1273cc0139f1ffc01e216c780fb5966f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...