MAL-2025-169203 Malicious code in trevora-cir147 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cc225376397d38cc42811187cdb5754bfa954fee0ec345b394e70c7d5f2836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160405 Malicious code in miftaiky-choose-then (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70630c4c36bfb9a9f3782e5f445adcf6455626dc0581cb83d4cc998330f1bef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153213 Malicious code in avminah-fagmdas-dfgiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28bca8c6b4d5b66e831a82e62ac29b68b718cbc9a478c0bea0604f9233dee32b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149944 Malicious code in @mipta1/asdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683063c4a2e43d43c06a75cfef05728bfff2149e1aa3278f614b25458b9702dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163926 Malicious code in nutr-nutyui-mutriao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c6e05da7515e648d113c624569277cd1bc98f3cabbbfbb0a8b87855bd06318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rtamyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013897a464f991475d0de33a9e6787a066e7ec91fe9b5e44d45b8de8110b16a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ai-aiusai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a955b813632b1cb3b6f31e857bf833cf81a59e351eb30e407ce86b2d2823133c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5cc8bf760973c0feafa69fda20560c014923cd340cbe8c3ef6d7c90f97853c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifiuza-iytdut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64426d29dbe0abee8ca71f5dba349d5a27b61ce8f7c22d556f555eb7ffd0a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-milipe-apuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982ee7fc52975e8bce216d240e3fedf3479491f492d1de8730996ceeb9dfd2aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b863728da9e2314382b8f4669265570868ebf7a959b76d946499b0a72e9aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3157d282d8fb5f3674fc5ab9ecbdc2d12df4bb3651d74ea73f15dc9fe582f3ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26dfcffed7d647a26fbb9eb5dd116630dd9506c911e7c6f6adb3ca642bbe24e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221e8034b6b9ce2ada503834366af387c756033e5b75007add70242793f26a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-muatigu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58da6a51503c77f50a6e3b854fe1d56a39e94363fedc6ee660d805376102fa00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07dc6c3d079ae3846a29bcd72bd2db7d89bd86492b797e2dc843afe90f15d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oalgo-kilao-akiako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca41a7cd696622feb6071529ed1074a5d7e842aa64aaf12226214a6650587b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145945371548e59e996f7a7fec7c42ccf0a75abff200aa138072717e2609baea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583e9463a2fb96638c882668a0356d39458d67fc2bd26e7da25eeae3a329c256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lumi-kunal1aikab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2b515d13ddaa48d96e10e4d8d33d5f9859a431483043682e2d48e1c9150be3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...