MAL-2025-150937 Malicious code in @miptaa02/savia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93aa5d7b53e8036b3c9873ebd5d67bc73b94f178247ce70b08d3b2c2d6c711fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160453 Malicious code in milraoa-miop-muiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae4c817c4533fe0acd5ad609f28b70281e3bb737a96a097360b07fe9e6c5d1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161309 Malicious code in nabuf-ogaf-doifo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c97dd46f4b7172b6b8da4a233fcb019460d750c992c60a9e56512d7e69da9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161744 Malicious code in namada-kasito-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 303631c0fe53a0ec0df9d3a71b393cde43800afd4f31fcf798fee87f0ab6fad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165982 Malicious code in siregar-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3230cad3be302cb717047706789c6573160169d4dc53a7e5366219927bd50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153852 Malicious code in bitha-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c2e282f0e9679e11bb3d2a094ce4d4064dd3ec8d26ec9679e58022e37a3c2d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154271 Malicious code in demdadf-nufaio-adudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e724f190307e6c88313b0515f54700d01043a07a13afa398c2db03e0d90d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168142 Malicious code in tealove-boy35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c12dce88f504cee883d05c4de542f591dc730a90490fbcfa85a15d9783c332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162177 Malicious code in nokire-abimanyu61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff7f5a5a8a3c59396ebdbe0e574ec53c0530af19ff53150d762c5dfdd85dab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156492 Malicious code in infi-gafob-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e46da3648482101d5898ed7a6fd91dd6bfc2f40944e419228445b387e9edf5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163203 Malicious code in nokire-nana49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104751cd94c0cb632e23b40664218bb49f6ff94806a36ca6207aa6e8e2b43443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161528 Malicious code in nabuf-otmbian-ifafbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dfcb0df600d2a5fb23dacff184295cc4b34b367dc54570ce6044422ee550433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nach-suck-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ceb1ad51888d7ff2f12161d6b80705cee7921cccdb0b082dfb539fa8f1eba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e1732ea3c88dd80a5800e4790885f46ffb8c22684eb2b1afe8514704bee237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8a206fb39bfee0ffd440545a401d0475e16b0367a60c007f5749c3e7682f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyafru-tufadat-darautut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046a652c676cfd2f219e48633d99675327ee4abf47e80d41e6e6135973657f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsnu-lkui-kagubumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96effd6fa666ffe8db87a250a78662d0954fea2d329ea8ca986a2c628f90e66f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-idaasdssuyffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415a6c4093fbe1c8eed05142f89514017a3ab39fb0e4eaa99c85f0101895ff66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f197f926d90f16a6a8d63ebbc8dad8fb3611d9199b73141dabc56654a9718635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofity-gonisfga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b99122408a55228fae7be90df11f5e633cad9576d932b32460c55447f77922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...