MAL-2025-177911 Malicious code in polymer-datdfadsid-dor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c56fb847c788955bf03a2e7dc4ccde119c3048d16f9345f47a7a36c40c56e00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174194 Malicious code in godi-tufufaja-inubufaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445ecf8e4a785f865d22d52969b0b363df2beb43cdbd041f282b192dde9e4c1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176751 Malicious code in nuilva-dadre-ahka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a39fd2cccfdb86eeafd53742cbc6f68cf1c1973d9dfb4b8100540efe905f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178429 Malicious code in sahu-satasmug-fafgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24f93d5fa64673c2602729ed9cf73c82002156f6d1a5c87fcd6c95d9619a129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178829 Malicious code in tauahur-sofi-dsh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f149a0098a187057343fe0d2d607aa6ceb70d1c672b7b97976dc3a074f45a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsbers-terd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f6c1d83b26c69eedacc8ac7d8c70e9db0cead76d291eb483dabd47f02a1b42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-toi-milo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccbc6875111697d59681fe31c7d8ca2ae4a3534c7b0ec7694bcd55ab9e00b07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-bunamab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3dd08418eeaad14cae815becb115c3e0973f8799da2d8271da13fd83bd459e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd39b8131563378cd3a16bc939cb21ba20b6cd6423efe88e629fdc5151f51a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-fdid-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dbcd40ffabc5edf72fed60845b63f7965dc54868803d8ff394e31eaef83aef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipajapnoa-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faede7e7ad450b34b3018a867920beb780674c165229dc889cba3348c149a461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-massage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbcfacb325d25d05d8c6f3c77d4a7d801e7db9b993bbf8841d407d4f807eb3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140170

Malicious code in miftah-mipta19 npm...

Malicious code in butanah-fipmofha-hfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e227b2f360486795659b1512edb033f5bfe7ab248e096ba4e4f3d1aef99fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samnu-miavva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3755be58145b8ce4201a3e34e6dbd6210e466aa122ca14fcab314c63c8ea47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadis-mamaadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e08ee131c6f1708789f54007f7d9b23a11d3ac4b05299fa42e5fdc4669de1bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-butdayas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1481ec1ef05bb8513ca4c996626bbfe0f9d263005f61d1dba6d1ce07fb446c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-ditofuay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8536609716442bfb4b2853a055ba83962761b4bb8f5c001137ca4a963eaa6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asafui-datajuahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28fbcee2604bf88987261a52aee35d4b2c860bbb4a85c58efa3d6a3ec810be7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samnu-maifamava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb150148fde44ceace5b9e203ccf3b78dd7db58e189820fb6ecce3c7129b639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...