MAL-2025-169244 Malicious code in trevora-cir49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14ad68d7f5d8f1149eff30933893ad747e588d12034f4dd99dd8cb25fb9e27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160190 Malicious code in masioaluan-ofa-batoila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a80f286f5197aff2a05c763277f44e9af7fc237a56e1284f646e8c96b54fe06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167255 Malicious code in teagood-nakama86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e837e48a674c4c5f89b8e23d34a50944d48444037d0506d79e917912786449f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152487 Malicious code in alvira-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e24c9db06edfa14f092adb6c47d96c641de22b0d99ae99999d75e43c022a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157736 Malicious code in kuinsu-lubuki-nasivanami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee39d20496f6ba83ab1b67cfff64f4bfd919642f65c4f784808f856c0a6a267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e438d23af5ea0a765e65458f7164a9ec5a845b588f4d03b7fe874ca62f5479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab876f8b4e96e5fe8d52779845a9580ddb3deba547091ef39c77d37114e30f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-miptah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a47700c34aefab9ad1704826fa4c76bf2196fecf69c96a4890219876a1b5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3987159359f47ab6e508c2a85ffdd1eb20067a9d5b4079eb5c014168506764d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221c40d13c905a5c7492690a25e3f86f827ae5e00e91cb9323c51902d7c5b5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligma-agbva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf30789041c452c967ff6f4e1207759bd0c58793d8e46237464b5bbbe3ec9853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipe-amuaisaiuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0763cee8ad1902d72a35fe49556c622a17967c27a834c4850a161355ad50b8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/scseh-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5fe4529b958763dfa618e1250e6c65ea053c25555882e67c812f1b5c14d969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9db22264a09efccd0102890cf21eb664b3434ef96317c7c587363cd1ef8711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musnisdr-nuyt-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09f22ad0489bed30f7832afb06ffb5ccbe7cdf0f3617d0c1fc864b19da3eea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166855 Malicious code in teagood-cuekin86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a6731e5e1f0e5824660d25c03986de9d4069d41442d4f3ad37c98682600509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152637 Malicious code in analusia-akifalui-asulaniniu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dedfc6e558852166ebfaff1f148ae226b58f0fcea99fe5d22fa6a541dcfa2707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168969 Malicious code in tehah-mana-buta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e18ed2d9f3ddc4dfd887a5f66218252d764e66c28930df712c04872d93b1ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150074 Malicious code in @mipta1/iynug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bcb4b114eecea22402941841fc841a50d42500a6ef24fdf45fbb830513ab61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150564 Malicious code in @miptaa02/dffdds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2581abc6d7e4362982adfc288424576f7caa58d2ea6b9eeeb512126f9e9ca445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...