MAL-2025-150938 Malicious code in @miptaa02/saviontra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdd43c9979affa1c32e67599248be342a024d0bdab6c35a954d50573c11390ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150774 Malicious code in @miptaa02/ivdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be82071d17d3ecb09479f0985ca0072a0a487b4aef605fad491da1c55df06d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160768 Malicious code in muda-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22a2e77c1c4ae4cbe0d7998c65d5ba7f4018b4735396501966dde5c052eb9d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163790 Malicious code in nudela-ofgaf-gafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5da9cffd8b2736f34e1eac31888665e94be76a350fb5292edca1d155d870904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152727 Malicious code in arif-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 039cacf1e744b27e857d5e5c42638ba58ae6b3b838cf5f2c5dcac27a9afc2171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167246 Malicious code in teagood-nakama78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85dd3487de18796ae47aff43644a39aceb2ea65e69e369e9a4caaa76c824a59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162641 Malicious code in nokire-kilua50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86ed8dee65e7e0145a20cd153bf8b7676922c4d34f29acf65955d6e83d34d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160734 Malicious code in modra-fuoa-janur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c39fcf3c2c64887669f0681bb4106e36aac9bdbcc97840e1fa34323058b2d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed047307f3ee8b69a64788cf62bf631be7f94f107e3d5ea04836ad8a82555b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2ecdf2f2c25a22d11cc021a7c4c40101ae86d957f333f5c2cc2964948af4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7994bf8b032abe55b873e0bdd54e9aacb02c855cb4bf62cc20cb3f8d25737c2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikun-misualaibaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 993f08d7d4d467932304e80abf2fc70cd4ccddbaab17dc28c51ed4d99a0825e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuba-avmungi-agi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d2e63f6a2ea132dc157b6378c3c07398016d817ce5265ca8a13ebb0d99597e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09020577b7611611b5fe984c81937481bd06e6754d92b95f179537ed64c8ece2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ad9466f9a5cb27e0a6a537011ef0b944e225eedd2617b713f3295e181d1fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lost-dinabusab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cd2789aa4ad99b74c9b51994010946b16173d99bc9ca76c09824db408e3d4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca1c6d7d7418974b98c302c5ef319ea2d59f557d4be811db0ebbad951f0b6ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dcaa4b5438d26c69de4057260e4bc92dbd95c9ef607045fd0bab4aa438beb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42277d7c7e46f9b5bc7a56f62c0378c88b2237b988ae45185f7f676f1b31bce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-sds-tdessrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8130c9e1d633aa204ec962fe3a72cd4ad19037057f5c4426e19a458f85ec15a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...