MAL-2025-169244 Malicious code in trevora-cir49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14ad68d7f5d8f1149eff30933893ad747e588d12034f4dd99dd8cb25fb9e27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167255 Malicious code in teagood-nakama86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e837e48a674c4c5f89b8e23d34a50944d48444037d0506d79e917912786449f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94295581c30265d69c037468a32e5c4579eca3076c65e8a1ef654ed95b11715b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152487 Malicious code in alvira-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e24c9db06edfa14f092adb6c47d96c641de22b0d99ae99999d75e43c022a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167835 Malicious code in teagood-sukuna78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92abb2acdf2477542fcecf5cf2773f3891928c64459b7790e1fe9c6666c16a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221c40d13c905a5c7492690a25e3f86f827ae5e00e91cb9323c51902d7c5b5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab876f8b4e96e5fe8d52779845a9580ddb3deba547091ef39c77d37114e30f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e438d23af5ea0a765e65458f7164a9ec5a845b588f4d03b7fe874ca62f5479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligma-agbva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf30789041c452c967ff6f4e1207759bd0c58793d8e46237464b5bbbe3ec9853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-miptah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a47700c34aefab9ad1704826fa4c76bf2196fecf69c96a4890219876a1b5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9db22264a09efccd0102890cf21eb664b3434ef96317c7c587363cd1ef8711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipe-amuaisaiuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0763cee8ad1902d72a35fe49556c622a17967c27a834c4850a161355ad50b8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/scseh-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5fe4529b958763dfa618e1250e6c65ea053c25555882e67c812f1b5c14d969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167025 Malicious code in teagood-lokina59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a1bcd0dc63038519bb91eb79803d62e1ab18f0f65863b9144a150346dbf4b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161065 Malicious code in mussta-ndutd-nisatrfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63fd1c91debd51d8a64a3b3a92cecb422a8f62f4b7c01368fa96ccbc94e9e0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164301 Malicious code in pitra-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4d3a0d5e55dd3d8bf81c11b448334dc264d48a3c2b64bf574049e6209a943a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150564 Malicious code in @miptaa02/dffdds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2581abc6d7e4362982adfc288424576f7caa58d2ea6b9eeeb512126f9e9ca445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150910 Malicious code in @miptaa02/relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403dc22d786c497c651e2f6316f0bab2aedce156a3fc1b4b6c66bfbdd34bd04c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musnisdr-nuyt-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09f22ad0489bed30f7832afb06ffb5ccbe7cdf0f3617d0c1fc864b19da3eea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3987159359f47ab6e508c2a85ffdd1eb20067a9d5b4079eb5c014168506764d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...