MAL-2025-169213 Malicious code in trevora-cir20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa48e649ec28a8f8d50738abdf7ca1ff4e36cda5320a4de9345477a0ec95d5e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166109 Malicious code in slamet-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 784e76b0673fd3ec39cf05e35b944037a72be2d2060dcc45e80d7a70f1e009a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154718 Malicious code in dioalgo-kilp-akiualabnanuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ebf2b1ddadc0d13295d5b1825733d595b589c9d69139b1e3669f24dcf58b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155374 Malicious code in guras-asia-nguye (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1adab17972c15caa7faa7438a08aaea1a3eb8fd14d8cd0735ee2941bc92f42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153516 Malicious code in avomainah-fragis-oguoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7788275acc9f370f3dfda06e07ae7e1dbac2328419111c9716c1e255b4171056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153027 Malicious code in aviah-afigaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 567ead27bd2a9f978dcabbb4168741010a65d17917622303c6a18b363e5595bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167418 Malicious code in teagood-nalikami20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e76b3a720c5de44a1625d716f762d9bfe5b4a7ba3c67c4da2b076438137b96ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162754 Malicious code in nokire-korean4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a61b0adc4d413b3f13089fdd0581a8f66b4ef9733675940b65d58eea7529de5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161377 Malicious code in nabuf-oguuof-dusuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 219b42cb2c03728241d931d55d658f031cd4cf0f81c4ff2f7b5fa38b234d7560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158134 Malicious code in lina-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805a77b6f58dc7cf01b7d0c645030bf7edf79c744c2abbb13f14392d102bcb55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152161 Malicious code in akabia-aligumafi-agbva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a95de52e791fb1184559ed304225efe17e9a5cbe2a54763b448200d8a9dec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159017 Malicious code in mahnud-magfu-goamia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0e9c0925020979dd5f73235ed079c6968c3521b52e10d2a7b16e61629fd79b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150995 Malicious code in @miptaa02/uwu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b8f1a9c600e6e12cadda516f83d4cbf089e0320d3554b35bfea9af8a8e881b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150866 Malicious code in @miptaa02/npr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4777cbffdd78862fe785906224199d391dfd9105b90141bae254a4215924eb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163641 Malicious code in nokire-zenitsu51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de58ad550d34014cc503e248bae3915761136ce8025c0422c5cac93924db89ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164075 Malicious code in parwo-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e201839967084ec0ac52de14abb7196d69070b6dea6ada90fa596066ad57294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151288 Malicious code in abiba-avin-aum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0157a3ad403484fcb7d6c7d9f9ea01e7b10f12c7a58055ebddae0b7028105c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156324 Malicious code in inagi-vma-nuagbri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5147a92bd24fdada0fa7273bfd12676c1b9dc02b85d809f6f088a7ea970e870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153180 Malicious code in avminah-fagmas-adiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f560b972ae8c610e02be75a23ab46f8741e21a0aacbb9ca97960e9434e8220e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160008 Malicious code in manuk-nai-ign (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c7ebaa7e9ccae0ef368f771e8018c70016d03578f6c3c48c3d113e809084b4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...