MAL-2025-178295 Malicious code in riya-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb95859219f2fc149d3af92b491fca7fc86fdd5517f838e0cb01a528ef53a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174751 Malicious code in hokage-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd3ed3bcf8c37dc7e8085ac0dcf496aff3bdbbe09073c309e3761a2f87bab3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174954 Malicious code in ira-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30eee402ea7cd2dd1773bc26a1c2eec16aa5dc2731704986b6b0f8215ecc61a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146272

Malicious code in wulan-16 npm...

Malicious code in muklis-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608357996f78439e66ebd4ec2474b88238a34d259cbe10d8d1d768767ecad591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f106eba1591289b3e13d226bb88decc061214d569e84abc6fd5a67fc70cb1e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25f64286b9577f6522b2dc3fb042e3d7e4842d93a80675b00c469ef2418e072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66aabcc0d1dfce0c5f876ca005a4becb8ddff119d84fcc4016fd2ffa921ce63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3eb82c45925ab1e8ad93a323911ec718d5b841960d2371b4b73bc1d648df364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ac85027aaf7e6b21aff4a5f4546402587587bb61053fc103565db2885b532d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d03f418e86779742e43fff3115cb200316626239a643d4773f03bfe30f8251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91397cad3d96c348ab0662d10c5ab4e17638eeb87240b235a0f13ac62b3e300c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c5be0d08d094c9c6ff4a544c74bdef4b9fe792fa0b541d0508612b5694c456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146229

Malicious code in yuda-16 npm...

Malicious code in yuda-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693ead895d12cbedb4b6ba31873781dac858e8dfe18876af0616f25f53ad3a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95b0604873e999358f599616b5a06e9afc1ee5829ca9380bcd085145c6c1cdbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd416b033225a5d6cd462e19abe9ffd51181238ae9ea030e4af22041577ace5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156524 Malicious code in intan-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8aa8123cf905c975281945d19e78ec0276d4a5e835c0d71c73064fc998f966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159611 Malicious code in manda-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd416b033225a5d6cd462e19abe9ffd51181238ae9ea030e4af22041577ace5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152813 Malicious code in aril-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ef277a349a6ff1b54614e64d732614eb74a86ef76b13900c19f4c8e9024c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...