MAL-2025-169157 Malicious code in trevora-cir105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd45d584cb4b4289c4dee84dea65891e6a5782d3f7d40e01813576dbc71b79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-munaaira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4411add4f73b42dd303d037b0e5ab1c912278a8d10903df6e8d003399d559f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154292 Malicious code in dia-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42372fdb54c843b791f7713f6c8f2370821d4b643852c7c179fbc3fa1d64015b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3945657e89ca95c120ba8e920451e88b23eea7e64a203d73c26a1e2fac9e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makaiian-aniga-ua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b933e567363119f6dc054f00d692543daabc72402a75cb6a719316de1805968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170110 Malicious code in upa-lubilio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df196f7854187d193b624f7666452634f4f1be6f08a18fdf5127729a8a36282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154850 Malicious code in fadila-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17f2f2f906a42faa54558f44a256caf4ae27c4bdf0bf4c687622d684186db4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162698 Malicious code in nokire-kore12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d08a9ac8b8ca594602816d62cb5f8290098b1d18a1c90fbe2af70379a84444c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150175 Malicious code in @mipta1/paso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3eaa2fb890fcfadd69a09dd2cde3ee9768c1122ed99a7fd190c971acc071fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153478 Malicious code in avomainah-fagais-ogya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ef90e2ed2f346416570ce7eddece18e28acac6b41389c54fe87abea859424c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153789 Malicious code in bintang-tea4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b59eba378baca6c9929fde84f0cf7adf24aba824916e507b74c0a6c9246e341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167487 Malicious code in teagood-nalikami83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d7c5199bf752577781a3421cfba94598e8bce5b390119f5d2392e2ba6a772c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1374aeb62bf8d44790ef28a5ef8000dfd440dbf90298e7aad83de7901a32b9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyia-ni-luyai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f81cb103497aed7a2719e5779f59c495b80c7e5e42a3e70fcc671d619a6353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167794 Malicious code in teagood-sukuna40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdabd7ea70f66d9f9e816d63f851d174fa4f5db76b33d2be3292e34199e9a4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151530 Malicious code in abu-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb7e880b0b347b9aa9fb8d05b796a80b582dc958dc9cef6f3f7ba79d03bf995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d961848fafff895d156e419bd788c6db82b9a575536a77b5156d9405785f14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aigomoa-iutamafafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c2a5acceb5441fc54cba624b9e557ecdb8ffdf0d7ae978936b8bda5df73e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-zas-durs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc3d816b0ba2cd0fe7c37fdca93e89b1b5f2df0e95b97a25ad2f58c3f045829d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d576a1dbbb22dafe5c0e49c04c23b8501601cbe52d7611a897bf1fc931b420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...