MAL-2025-159619 Malicious code in manda-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af83be92a4d78539a7b8b449ac1e8611de2926a3f0bc712b25a06a749ca5054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146221

Malicious code in yuda-23 npm...

EUVD-2025-146265

Malicious code in wulan-23 npm...

Malicious code in wulan-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35122b198300a446e333c58c850b7189fe449f21f2ce7e75b3261f2d7b5e500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ff7be3771e62b8dd8ec2fcfc83ab4ef6fc22d5a52801367bfe5bcb3a0fe856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d3cf48e4ee9a1fcf575dfbe27648cc7e0befe93a3b02e6b0e081854df4bbee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fc068c81fcecbf32472bc4962dec03d3f1178f0b8822a96b36ed978fea3938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5dcca1861df3587223f8cf7acb262f7ebeb2b276aef558f633478be8312564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155578 Malicious code in hafiz-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5dcca1861df3587223f8cf7acb262f7ebeb2b276aef558f633478be8312564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111779 Malicious code in curved_urial_lavender-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c83216d981a841de6e0e8e5b3dca29059bbf895237955768d731c48b9b26c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112050 Malicious code in latin_bear_blush-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1171bcd451a63ded50db6ce500ce237b7366ec67a33c824a23a1aa89a1e2f423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74893

Malicious code in ancientcardinalblush-23 npm...

EUVD-2025-74773

Malicious code in curveduriallavender-23 npm...

EUVD-2025-74129

Malicious code in unfortunatesturgeonsalmon-23 npm...

EUVD-2025-74157

Malicious code in thincaribouolive-23 npm...

Malicious code in thoughtless_emu_ivory-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4464a3667ca84e19cb1a89958a2b80213cfa7b5857802634e34c90460b79b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77622

Malicious code in fixedlouseblue-23 npm...

EUVD-2025-77579

Malicious code in likejaguarmoccasin-23 npm...

MAL-2025-97608 Malicious code in bat_pink-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7dc637dffb7cdcd1ff6bb303a791f729e32c7b31fa0f7ff9eec6fc211bf20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bat_pink-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7dc637dffb7cdcd1ff6bb303a791f729e32c7b31fa0f7ff9eec6fc211bf20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...