MAL-2025-178305 Malicious code in riya-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f40a38145a377c34164a9fa62fbcd1a9e34eeb67e32154a133fdf9f13c6f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143529

Malicious code in alvino-25 npm...

EUVD-2025-141519

Malicious code in hokage-25 npm...

EUVD-2025-140418

Malicious code in lia-25 npm...

EUVD-2025-137066

Malicious code in riya-25 npm...

EUVD-2025-146219

Malicious code in yuda-25 npm...

Malicious code in aji-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421e341a5598cd13543280307b3ec2d9672ed7c29d9b1b560ddd0270a62b8b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df484e90ee86d0283a12b714e53f3f480c2c31ab8cdd349ad9ac562b8420987f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074d0952fa925219ce3374fc5a686b3b8f2d8f1077a09158190e7b96f5210c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector debc7dbd4dba83662e3ed726a26a0059e4d5bfee7881f48d2e3b4c26220fadd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfda109f0435166414daa4ee80ee893e280194fdf8d3da4b999c097d143a78e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d43c32b98a93faba14e0faed30e8d5189d585db32d06a6c5276e7398171980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae15a28a568c07ae9487826cbe207c868e1fef3cd71d3bbbd676e453fc1bfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155580 Malicious code in hafiz-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5fdf67c0484bd6a78113876a1b8bd8fa46a3705a42bfbf55da494dac2ee969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5fdf67c0484bd6a78113876a1b8bd8fa46a3705a42bfbf55da494dac2ee969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165250 Malicious code in ruji-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfda109f0435166414daa4ee80ee893e280194fdf8d3da4b999c097d143a78e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152464 Malicious code in alvira-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db9af59c91740dd75934424d4112a6dbf97155ebf02517f3f9318725b222c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf5b86e62d614167e25f98d2e50479f5ea063e0091f3bef926784f949e2639d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146263

Malicious code in wulan-25 npm...

Malicious code in rita-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0509daf36783b4947b97c54dca5e8c957776371502e21b8b3c866f8f2bf41f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...