MAL-2025-174744 Malicious code in hokage-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a0695e6f7f07aacd63d02e3ff47eef6788887be242ee04c35cbe197fd2845f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135011

Malicious code in wulan-1 npm...

EUVD-2025-137452

Malicious code in polymer-tehh-1 npm...

EUVD-2025-141325

Malicious code in ira-1 npm...

MAL-2025-178100 Malicious code in polymer-tehh-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8005420f14b73e1818fdd4cc898cca4592448fa7dbfa825030acf466837db330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a0695e6f7f07aacd63d02e3ff47eef6788887be242ee04c35cbe197fd2845f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ca4aae9c64caf96ec13c82d772a753a809b2623c75b18f767323b2895c44aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137100

Malicious code in riya-1 npm...

EUVD-2025-141537

Malicious code in hokage-1 npm...

Malicious code in yuda-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab34cd176788e365a3a652d0944bbab4691a6c00c67da665229685b2d330eec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaasya-1-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4a97c26a657bf603e2001b24371e65355fe5dff7cc101b82e4c390064bfa9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152047 Malicious code in aji-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1affc41b278f247a3f0304eec107e70161731bb239510bd0eb16e50997f72ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155563 Malicious code in hafiz-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf835cfe210b9c2fc00c17941b1091207786837a751fe4593f8974ba280df35f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160792 Malicious code in muklis-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1ecedf422dfb8cc52a22cc7849ba28261887fa1bc68fc4b0ed60c5ebc8461c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164878 Malicious code in rita-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd87721e88fb4cf7bb85fa17fecdd11a782471ba87b0540f80daacad9074498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154035 Malicious code in cinta-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6698bc9204796aad656dd385f84523ff47775b15861d9396a71a72d45769f36a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf835cfe210b9c2fc00c17941b1091207786837a751fe4593f8974ba280df35f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d901d0948ec6c43ad27e577f39d3c7a670f34098b490c7e780f8004b9caecfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1affc41b278f247a3f0304eec107e70161731bb239510bd0eb16e50997f72ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irassdhi-1-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a48649ad017a8634b9af7354c56cd985a5aa658cf197e4f4f38a6a6f4652a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...