MAL-2025-165806 Malicious code in savion-dsi-ise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618fbb3625a427b6e661a3c46c8fbe2cf27b0255f5023a8fd52b6ff082de9ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165982 Malicious code in siregar-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3230cad3be302cb717047706789c6573160169d4dc53a7e5366219927bd50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168422 Malicious code in tealove-nameka39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a476297f2249a8a0ee036c245e6567519738d1cf2c4fe1ca7a5098f5572f409c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165360 Malicious code in sabua-muhayu-tadugfagmafaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c11336a31bd0ac38274930f25f1a7eba0f043b1ce0b14374dd8fba522ce9d58b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150323 Malicious code in @mipta1/ytuax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239347468daf594e6441cb71b3043b5dacbc7ae17a79972fdff8a6f068ecd78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150937 Malicious code in @miptaa02/savia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93aa5d7b53e8036b3c9873ebd5d67bc73b94f178247ce70b08d3b2c2d6c711fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150269 Malicious code in @mipta1/tezar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e952f7b5de69f21cf9ce7d30cab832fc64d18aa8287658a698d886efdd29e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156080 Malicious code in icha-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cede944656044dbe86fcbd24b7a386653b249221204a86110e6206a45ef0285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162376 Malicious code in nokire-arhani61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e82b8cba134d4d83426e35a89e5ca0d371a3f2321495ac3d6d89199c6b0b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167462 Malicious code in teagood-nalikami60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43eae227ca6f9405f2558d9be11ac3e79382c3ff0a5a40d75a75f4a807a42b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166783 Malicious code in teagood-cuekin2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a35a48252179027f0d996afcff4dd1b7ce80f4ffc9845021f1e244f583f0ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154404 Malicious code in diago-kamuli-luauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e8d132b415197dbf6b1824ca1328cd50f2a5c117537caa7382cbd898e49a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163868 Malicious code in nuilava-dakaogfrae-nffhaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ee396b6c43c66cb70dcbb55509c31ba3fa49f7391557ae0f59bbdc09b7fae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-iala-maonlauai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854da5a9e878bf7fe0746a79860aa1ba3e9d1e5cd6c91035a2bcf210dcab29bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159488 Malicious code in manadsi-soroi-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a8685df02f3d31048f2547898d82abad7b31aa43e583f4d02b258ec125cb1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-sass-loader-test-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ccab95f5e2ce85e46de051c78ad013ca2e19a9d5a01a4ee0a843f29e4cc47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-sqlite-frontend-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b00438414a1d05247d07d79b8384dbb973407ca000f4e44d02b9467d274865a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-winston-eleventy-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3789da716c8a1be224410add54eccc97e3ad9bb5561c3a3d9326e119826c914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-chalk-neptune-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f350c32b8471bb603135076ced6a8677a3340a0c907da9258101c78a84e7569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-forever-prompts-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2034ba99b3fac3845b32a389d7bd18a7f63cdd0abbde72b03416fab0083e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...