Malicious code in modirai-igno-jimg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a727ea716c6db03d2302ae2bce40fab835b2a24ac80e1a099ce6bfdf58612453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragia-mudiffa-sayuguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf5a08412253df7dba9623ee1aa86b0da6a454c56c23ff915ef6e429025cc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alabki-maloloikaiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189e8d25f83537c65fa518a905277f19a4b2a31fb9e132d4a875458659e980c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164292 Malicious code in pitra-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fc068c81fcecbf32472bc4962dec03d3f1178f0b8822a96b36ed978fea3938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156886 Malicious code in irashi-21-re2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f10798ca54546bde1805c7566ff214c575d1b5a13fc2d3154f73b32d16f7167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151187 Malicious code in aben-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4798665b638d60fa8f41e3fe7875d6fbe117c5fb32f0fc337f20ca9d506fa188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152711 Malicious code in angin-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6871fb8964505144615d6422f003eff7e76376e2280aa213485eca152cac177f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166671 Malicious code in tadasdhi-nilai-tesru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7dc282a605f23bc7af8869fdc473a8c8248c0418a58aeff2f466daf38c67ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-postcss-phoebe-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0045106a7c2a84cb437a40bcd035adc53aae2e23c51b66117eafc2770f0ac1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142849 Malicious code in gatsby-redis-sirius-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638c187fc63138815d26c2282ecd2223ddc5228519d789c20da754e12295f9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142153 Malicious code in eridanus-nightwatch-draco-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897faea076021827c61bfaaf49e286cca7ae17bae43b9fff7e94eb35c29e8b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132281 Malicious code in bella-tongseng50-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa73d2e847b0ca8d6f7dd416b300026cdb5d8d53d50f874a603663dee770ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136866 Malicious code in sari-tahu20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af34f26c3bb6d67a4011759d01119e8a0610cf6c633f83a4ea7fcbee39343474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132402 Malicious code in changing_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59fb93114e5e2615834c88d9f2395cea4f0fafa98df5ae361046852b08044fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135257 Malicious code in lisa-serabi63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40af467331e1c83662167be59f967295c8d873a50bef16bfc00682c6aa3f67d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130012 Malicious code in safe_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e9915989a59863fec0cbd999fd37f13189b33b5374e94c6a8c7fa8af073299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-106244

Malicious code in changingalpacaz3n npm...

MAL-2025-123553 Malicious code in theoretical_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7750268afa6ebdb41c4ce95dd0dd867025a4a3177667ecc0b3867e95fb3ad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dear_elephant-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd296cb8cb41d0994f4b1672649e774f450dd1b5f20f7d09468dd647ea8339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77364

Malicious code in changingguanaco-silentdev npm...