MAL-2025-175581 Malicious code in ksai-kais-ajiobnolaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9433198100c1be04aaf3272ed26a7531ebb9a76e723cfaf5e07d55ce5e56c8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177725 Malicious code in polymer-aga-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da079d46ffc61efe195975d5eac2ada306d89065a51eac30825ec8c811bca304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173353 Malicious code in buta-faina-igaighfanaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264782228063cd249141c66c051a85d04b769882547df6e0a4065833b2834f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178282 Malicious code in rintono-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c7b5ec150ddb4446ffc4f39c57e32680e9e8d36e9eece90ca45dbca0dc328b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173837 Malicious code in digo-kaisoim-olka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5504b7480cbec65c7dbcf5754edf37532b743b0e72455ce93c9a242744d74818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177500 Malicious code in poglymer-ognamoh-afiaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6afb2fa45285e7bca408bc4ca27e352a554d1564579c6d775ecfa75eea2b0f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177563 Malicious code in polymer-aavof-adao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95139fd29c4dfa512c59c45b9043f389afe6ae01204d27fe1eab7379aabe173a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178724 Malicious code in sumpel-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e0ab6cbbe088003eacd39f6b9c6c1f9787a3d95023e1a9a6d449ed38108f45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175810 Malicious code in kupaio-ulokia- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8812e28fa4c2f11eeb75cba960cf3eb2fe74a44780ba4e5552a376d54ec0b87b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176703 Malicious code in nuilva-bavia-manahayav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9f677fa014ad88c2fbeb9adb946d5b0a316d0826e07543ba1352e1b5c54985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177968 Malicious code in polymer-gibaaga-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b5545f94cb1ecc849cecec316d76b27ffdc03bb4422fd86ca30e27ee7f3eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b439ec9e13dda10890f4cf1f15feb7a2c9c43abf87bd17127d7029c22d800e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoafifa-abohoahdfadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5e8214d0889092d8b46662cd7760efa030eb37af2f94686226839d0582c994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-iofssn-tersd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fdce4cbdb79cf19ccf953f9c2e3fc96b41c057beda8f846d11ba8700331976f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusiautua-nutgagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0440aee00853a9a493c7a14c5b5dbdbcd5d3041dc2b2dfb39c2563b5d18bd885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 042018ebe8dd474c23147d714f5b0a2e883b4c3b7b9e19af096a75dab87e577a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137371

Malicious code in polymer-tuio-tesas npm...

Malicious code in butry-must-nirta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4bf4624cad06b483f4e268174353bc5e21b5167139b873c10c87addd7efc061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abbdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8769999eef7765c6168b9cf1f19a4c304728d88c42984d8537bb684edbfb9ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-vgg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2fb2b7ed28f1a3884fa63dc342221d63aff4600fd6aef0c39d207d5c23366b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...