MAL-2025-180344 Malicious code in teate-thy-sonic-esro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56082530cf3c91c363100710215b1d6af43b752da441c99f7a7a31fd5e1c1859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afhfia-gaifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8ab4aec6b6fb82f907eb53ffdfbf5add6d4c1875ccb94cae0410c39340b59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42830369e521d7f0231b3d6fc601af2d8956aee1e99ecea64a3100ff0d479bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-142545

Malicious code in butry-mutyu-waegressur npm...

Malicious code in miands-masidasfdage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbb45955a7aaa6ffda55cf347060a30562333d51f122a728c2d706cf0031d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174400 Malicious code in goodafiun-ta-fuagif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea949d3dcf49d7b90039d757f2a61ef19763d66e42c87c7473517d84028e4b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173164 Malicious code in buis-manis-mioapaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac2a638312065fe6a5edcefe6b7a9b183e6cd858a4bdd20770a1f4ed746ae55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178914 Malicious code in teagod-naiman9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3fd3deaa2d95ce6183d65ddb6f427aa8c984eb96b7c230b37e735a4c216ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-sautuga-infarudui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7e3668b860c6a00933c325e7cf283c1b0a5ff929b983e0e23ceac9664ed3c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avim-rav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f33a3f5020528958e8bdc785635753e98c2652d013064ddc442e10c0534565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178612 Malicious code in sahunim-satudufui-fadabidant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbd43e4d073e6afc6001e2d4cac6000c316e3b7c5ad3d5b4c41481dd13a9e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176341 Malicious code in nokire-kushina20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c5b751925aadd67ac64b31d63ad1be49f2bb33dfcf0f49ac514df151d9b808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-nutayu-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20564bff3bce1aab4d4b3c72e7a7860221d435a56bf7e3ec7a11cb797c2a15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-vgg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2fb2b7ed28f1a3884fa63dc342221d63aff4600fd6aef0c39d207d5c23366b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178314 Malicious code in riya-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4088aa58e37aba819a33b0e86537e9ac673f4851dfdaa740372a403bbc4e15c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175206 Malicious code in kapvino-socovni-fafgsjkfskfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector effb4855561635a5da3e51269e203f2e13a654d72dc50245cac1d789c43600fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178216 Malicious code in rindaman-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a6b6ded17a6d55b8583117493cbee02741b5653ef1b8cfd7b1c8c1afaf9a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173783 Malicious code in butry-yust-busy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f497e8d16be4093586226a88bb543805643d08bd24300333b6ceec35db5f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144383

Malicious code in heres-matiula-umanuiada npm...

Malicious code in verts-otimmo-ffigggafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8ec906f4b5cfe135af83d35a4447f808c8f957982c9226e6fb4019ed5adc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...