MAL-2025-169154 Malicious code in trevora-cir102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b17ede89ba3a457a0e5602e7cb00cd60f7fdabfd77daffe70f7db89ce6ff9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155920 Malicious code in ican-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c13684937374e3e19c3afb330ca6d082ff24a5068c805a2944e2d0980f106d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159208 Malicious code in makan-aiuga-fiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2dd7ee6808091da803510602cfc842dbfe7535101afd4f5a0646fc5ad23b649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c094facace878597ba61fe7fa757972abcb40d7e2b5ae85923d44f54e61353b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153690 Malicious code in billa-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c64c8b40d6b61b2b235150da6bb96c837a4cb9e8ae0b518a46bc200e3e2985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167606 Malicious code in teagood-nalikoli50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca6786f536c924fb212b73eb379d5ca8e38214339455fe44535133b8c466863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163514 Malicious code in nokire-zabuza26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b8ce693fb7fd318ac8130fc770c90de9a876ea7dbe3d5c18ddbe5f71fd7414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163466 Malicious code in nokire-sekiya73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad1b6de1ee92350a7f13db46b1ef3004eaab8d49bb3def002a5b1c10039e92b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166246 Malicious code in sunden-diak-itarukinyuia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b421830c2c3a95d2aff12ae248b60e946cb8336699fdbcf25fe059bd62e7c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2d2ebea770cf973c9e8cb92d5c39a053219b6d6cc7304fff64857e76aceab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423e136388d925bb923024c333d08cbb499268cd7366e752b5dc57e9395e0486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unofogi-gamoani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e031f15741006ec9e3e566635cf06b8a2017af37b82d81ed54c817e7f2652e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1662c43d1cc039cc31874876994316b068d5e657840cb4441d6e987b4be25d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156723 Malicious code in inufi-gfobai-jagiafugir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c13a977b6c9dfa11c415d8580b4f0a5e292ee170d7571bb8e14711b4364c711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-nubitres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d94576400a8fd00ab21ada4fe3873a233d94bcbb41ef137f91834ffe766937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kamoi-ailasaloiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd7873bd3fbc49706d0181c9c5b0ee66571fed10391b82d2710dec64eb528c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164842 Malicious code in rinto-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66438272c851678ce1d946725b6bee6212b2450b779ef615ae7fc2c4d362777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150943 Malicious code in @miptaa02/senba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7badf20708abf487ce49e3f553512ecf56c80a741a1f10c789b681c1548e33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151434 Malicious code in abina-mibiian-upmmia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1779d555d637d032ca22edf5361c68a083135aa978f26f51511aa3889af63f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164663 Malicious code in rino-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b1fadd554c2146f6044907d2ee4b3b5f7a2c64856f5a70195b67ae6491f22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...