MAL-2025-174278 Malicious code in goodaan-ngafa-nauff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f03526837d948de369f6ee009dfd2081c5628063cd5142648e27f52cdbfa92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175335 Malicious code in kapvino-sogani-odgafgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63ef9b67fb3a1499269a387c9e7b34d5e0cf412cb43b15097372051d30c97d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176402 Malicious code in nokire-nakao12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f66046eff30478af907beedad0ce85afc9aa4a0feb377e8a0de69c9badcd374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179118 Malicious code in thambi-vsbers-utyhg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304a1b81a1f37150471c27f6b07df5a84501da56845ed295fc904d533e4c27be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-mund (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59f0cda2e163ffdf400e42103cb3c9cc5ea5340377e593c8f7e45e514c6e2a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173783 Malicious code in butry-yust-busy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f497e8d16be4093586226a88bb543805643d08bd24300333b6ceec35db5f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179206 Malicious code in tray-iutup-nusady (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1340054155ce91aa47c9834871d451da0ed26e7e1023b47096524eb70cd0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178216 Malicious code in rindaman-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a6b6ded17a6d55b8583117493cbee02741b5653ef1b8cfd7b1c8c1afaf9a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176313 Malicious code in nokire-kaguya22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2296f7bb60518e396ce9d5e5ac2396ce855027f6af366047408860f99360985d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177870 Malicious code in polymer-avonf-afof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ca73687406494f319aea337d2edadfe02e58d996322c6f9fff66e3724a9563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177010 Malicious code in nuyar-adadar-bait (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a08f105328f3de8484606a5918c23c8772b4945d434de1cf507318f8f0aacb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehkontol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a5861f07673ab68d180a7bd8a640366c646c4e1d24d11b6c05e3c9f7426647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pod9r-munio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f72f2e7087ce06336c8cbb693b5cdb750479066a8f49df1a58c7f9e54c8c9d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoui9r-mafodfna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5166450f59a28c40264c420bba5d07e1899a7a08020c3ac07b5e93fd136fbb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimmo-fga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4140ad4dc3a20f0c7c46b05f6d6f8a32046db3a79490cfd8fa434691cc364a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172581 Malicious code in verts-otimo-nafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5146fc91236c12af5e60b3d841ebe7ba0c604b243f712dd7d6969849326f16f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144383

Malicious code in heres-matiula-umanuiada npm...

MAL-2025-172475 Malicious code in namei-maila-aiamunubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfb38edb4e2a67e40b3ec430f46c6e71d4a45e4dfd3cdbf79a27930855e85a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172488 Malicious code in namei-mala-abunubuiau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20887f231554252078f8b94e142aa3ceaa1f6b08c33bcb8ee45e44dced99123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimn-fagaposa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180c33f17c17b0375411bf6a61f7c25cf8a195fbaf352edd1408dc1dff071276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...