MAL-2025-176341 Malicious code in nokire-kushina20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c5b751925aadd67ac64b31d63ad1be49f2bb33dfcf0f49ac514df151d9b808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178955 Malicious code in teagod-rs9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47372bce5ce26118705676749e75a346b4540701654a4251319a0aafe4ef1ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175279 Malicious code in kapvino-socvnvi-bofafanavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1baa15ef04b936a2c487f116e81662f39c6634054018f218f65f717b1aeba064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-buyaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b54e2c5335d28ff873ef64194f8795881d4d3e268bb9a6bb97a8c04b22021da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-alif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd79da6d8a2fb9d762563b686dd3fed4502f24f3797a058c133eff33a912e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-gbfafgafaibsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff260f50d9054ac85f64c2389a4ce9fdea882c72d707d8964fc750823c9f8dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kiloa-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e445cbf4716827b850ee28662ccbb26ddeb6542de7d1c25200cf1a866caac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gisgsgghab-agagada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c12975a1a185257995b0ad0b81687110cf8335a6abfcef3db9245e5ef73fa37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banifbo-imiaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1abfd95e50c51228791999e162f9d199edab57395b756ab4766aa100a51f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaif-danuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb1adce0253b7635da301cf15d1b326bee83ab105cf7024dfcb0772f8d2d30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakaooai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679687cf56b2b1bf4ada0e3a8606b951fd4b6ce25dbc79afd47661ed44e38c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-halaodi-misalania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8b1702971d7efe08736ab8c151e5912fdab5a80587e8e48c55e20d7819543d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fvnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94449349041add6084206b6cbbd9aae9ba3526a8c976bdee3b4e8ae8d0c413e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-nutayu-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20564bff3bce1aab4d4b3c72e7a7860221d435a56bf7e3ec7a11cb797c2a15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140691

Malicious code in ksai-kais-ahakaoliaaji npm...

Malicious code in polymer-aafsfia-gifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3894c28d6e65eb50d18857543bbcc1d6ac6acad0c76e5ad879383aa4f734ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-mund (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59f0cda2e163ffdf400e42103cb3c9cc5ea5340377e593c8f7e45e514c6e2a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc018302a1fbc22933a3c76a97a7f8248b8326701c30d629fdd213059cf2630b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daarde-fagafiafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82b7b2a1a8e1277d9e1c511cb6b627c36367683228c82839ca71e7935a0d029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soadffi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb2f17b38d69b92f902e7e738f4dc2183646f5f50e90260369b53ebc0b7ff4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...