MAL-2025-169158 Malicious code in trevora-cir106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2dff06895b4b9f2fff582d1e21f967dfbb085362e046bb9809d3ec1b68e99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164119 Malicious code in pilka-kali-nuiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d519dcf93deebee983d8d2200237b64ed506260fa401b67fa741ec2141df0f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168656 Malicious code in tealove-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e12c5f8e68aa2dc8c56396c8e281a6325524d5a22e59500d442a58ef647b375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160922 Malicious code in munir-nuys-nabsfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05661e134227da33694d86905402d15c2dee8ced9724e57d15013ba2258d7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-mkofttifra-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99547b2727a8647f31cb7971fb320465eda40a7490fccc72c33b05be2c66365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abih-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ab51e75c7d9fa5ce68a20dcdfb72537cf0ef063b9a99227dc3bc5d3a77edba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642045356159fa3ccbb8982258077cc0c1919904624e7d9bf6d175f123082574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/aseszwasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0c5389e5a5ce2f85ba640336debe4b4a0d0d188800e636400065fb9e2a9994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee14c13a4a58d321f2c9c4990f25e028d20a616676fabb19589c80aa3ec5a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0126052f54f50077cee82437733dcce358b785e13f4e978f7eb9c7a7729dc91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsnu-lkui-kagbdssdgsdfdgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a605bd7ae62736d2eeff54bfedfa605749fd0d4026cc69c79ded57888b190116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164838 Malicious code in rinto-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a97fc75184ea0883a91efbd8ee8ae8b5fc98ef41293b1888a08c6d3d5e07e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poli-aki-alubana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd315fcf7be4d2e93fdb84610a142c6828b2a335d6c3cb7edd6b76edfe6a2b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164179 Malicious code in pilka-lniu-liikali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d03fb5febbb77eed5803a5626b89b74d2bdb36e06260861fe10ddc90980b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-f (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 720e4b845998cd7495b5f3e9d151802abbfd8f2a77d2d89a0a587f9ac981b726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jinanaguhia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559aec7cf4fec915820da745e229b3ffd9a8acc3fe4b8aa87d17bbcd14faabd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/nhssdida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1fa6df5b3348faadec217601e0cccc91b5722aa87bde7b114454bf6c56fed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be2f7a059cdb361ee7ed3e8b5dc4f125b7bfb676a199bcd0b0af198753ae4899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162087 Malicious code in nokiragne-asafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38c7d55bd357a512ba67cb18a068ffa8d9d017688e67170513bd9051ef7e318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152633 Malicious code in analusia-akfai-asuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fee430d6e83ee61f2a7a29443dccca1b72252c907748a63256b1dabf2511b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...