MAL-2025-169228 Malicious code in trevora-cir34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63dd39901709edfea0b4786328740c8023ada1f806cce68c012b015017ecbb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155874 Malicious code in ican-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d891f670a1eda926665856cbbb7477f49cb5f700ee07944d803711f1e4d3b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162846 Malicious code in nokire-lokcek88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f06454e5651feacef0d7d3ee29997094edfc6673fd13442f066656553829e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156005 Malicious code in icha-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a214f7bb72daa57e4ad676aaa633f92f10c12c12b4238cc480f80e1c09bf46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158023 Malicious code in layla-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e46800bed346ac9667318c49bd2b1c133cdc09dd722cea19c9abb5124f2355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161949 Malicious code in nasrul-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2550a59edae6a3ca707fc8d7861d4f59ff540405810a8801d86a788c4284b303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158731 Malicious code in lookingan-namala21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5049de5bfe9494af84685ee064b8b8676e984815315278d3ff4838080fbf7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170262 Malicious code in verify-aikn-misaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98c87f794f4836971b0c80fc232b0e7078d569dffb277d18f1895bc02ca6fa23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169354 Malicious code in turisna-sgsd-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765f2fcb62caa592e0babb0518d2cbcf117bf6b8d475cedb8b29065f4cb27b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169608 Malicious code in uarg-mthai-suftaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0e0de467ac283c3460a288d5d083ac7458d3ac8426d223578995378302d87a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155951 Malicious code in ican-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a1e7c831ae6dca400710fd4792ba89aadbaf0dab99dc9fb69e8a8aab05dac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168891 Malicious code in technical-alnbio-tolimasyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db4152e464a3482db35baee44976ae892479300fdaaddd8f2369a71936df3939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150768 Malicious code in @miptaa02/ivah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1fb6b26dbb0dcba4ad7c0a5786e44432b1fc038ef9239f9003f331bd4ed10f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150993 Malicious code in @miptaa02/uu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0192769a43da50dab975f349ba64936ac99019f8435134960b290aa8b350afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152248 Malicious code in alfiansyah-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed92eb3508ab6a093e642e4cb8a0f6de85ad8ec9c215745dbfeacc16f6ccfec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167745 Malicious code in teagood-namakai86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e1125c617f177ba76cb760b376872426e6bbef752dcb1ce3649fce4d64e7e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161068 Malicious code in must-btraa-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0abedd2609b1255a21d1e81b73e3e16d77dac49b0657b0d21f85ec4f01290283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168586 Malicious code in tealove-okta10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2942f9d86922d1fcaffab56f486a847c7da979d88ac4991f4d698f5b6c71a62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155117 Malicious code in fitra-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04890a831aba83e6d49d86abaaa8cb4a7f616fbae02c335a131094caa59eff47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166096 Malicious code in slamet-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff366500b348402e835dd5e8b6010271244b2b5d8a7f5ab1980bf1fa0a142abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...