MAL-2025-173591 Malicious code in butanah-fipopha-hafufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295a91161cb8a11c7452c3649a3c576a28043166056086bf68486aa037aaf302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afriiiiiii-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf65810d017ba413913c2cc1a006c144f451d9a179271fcc6264d83c75773fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6467432729941e6eaca9157f04812bf3ae5f2501e370c27a52f1c942bc4953a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173345 Malicious code in buta-faina-aigagna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1153f848eac15890d8e96e8fd1ce2694fed5eb8d60dc4984cf77a7df6deda7db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144597

Malicious code in augis-pod9r-muapila npm...

MAL-2025-172058 Malicious code in apasih-led-pokia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f09b61a597217a5c8761bb130b3706a9483805a3bef8776d2976e3302d98c3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evieharrison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26451bd47e2a94ae162fb9c9493ed833958209bd516b61f207815da78f072278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170173 Malicious code in uyafaru-tauimat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a54da88919ea5c3cecddc6d600ff9851d0bc84b71676c47fc55be6192e7de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168191 Malicious code in tealove-coki34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa9d039df00a6d57387709dfcdcd3aafae20a77066b280b69962cb2bcd4def5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragia-mudahi-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a49c363aef4efc43e4f5a8df560a8a9ebeeeb0bd286245cccbbb9a9da98efd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150915 Malicious code in @miptaa02/reyua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35718d0b3da1196ab42857ea0935e4a38b96e7ebbdd453a21bd2be6f7421a9ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safifda-munaria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a405c70340035cab0f1474a1761c3ae4eb55f91c57008d65f2bb4fea2779ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muny-boph-sadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80843aac9e7c027e65d15b2b8ca7e2a63efc32a6d063601c10fdf57bd7740a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153653 Malicious code in banuni-otaima-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ca0c63aba15c7652ed71423d4dfa78d22fd03900cb5e2030f2248e37c360d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150900 Malicious code in @miptaa02/rassasdzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1987150a291682ae767d99cd08fbb98adf49e5b0bfc408e8093cd99be9e68682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158612 Malicious code in lookingan-namakiki96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26e7d47409b62247d78f793f648d3ee82fe605505106c197be0441d3485d712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fcab47d573bb4978360bc559c7eea0fc7b2a48b480ae13343b4bcaf27e52fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nutay-ko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256df9b9c7da58e8b2c1f9a9cae09f2f176b88c7c837514d8cba2410abc2584a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164271 Malicious code in piluvaka-kaiuablbu-nunubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18700f1db2e3534b2be7afbb74913753f127f553c4ef772e0dac7208a464339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168934 Malicious code in tehaah-codfd-mut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc73805735fb6d8aed233b3cdf95697a663040559788093c4564c6d3127131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...