MAL-2025-171691 Malicious code in omprakashmehta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012af0179b00bc2c1e3fdb2e98612ce0cc4a0f1991ecc19eef6d291b14d95bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171528 Malicious code in lunarpathfinder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18c0e845e73be5ce68cc29739c0c884f26b03a7a4fa6b14441fc5320286188d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171846 Malicious code in shahidazeem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15f7cf056b0c8c74f998a577ef70b80784cbb89b8243ea4c2ac626d22f9d4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170782 Malicious code in aldorev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1b095a6457ebbd140133effc5517900be075f2686430a3508f15f3440cb81e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170925 Malicious code in astroadventurer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85af7a4c178495c52bdee91250293622a607c820df06dcddbb517f1040cf07c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170729 Malicious code in aimanfouad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55fe8606b42f35946671f16161e3879f69cf5f8a0dd5c7e5b16ff8002dbb801a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@abbeey/beypremtea (1.0.0), beypremtea (1.0.0) potentially affected by unknown CVE via beypremtea (1.1.5)

beypremtea NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on beypremtea and may be impacted: - @abbeey/beypremtea 1.0.0 - beypremtea 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-170970...

Malicious code in tealoveness65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26aeae99b37fffd4839851c725a48414d92335588bb418fde6c953791598d501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagimas-ofisuogafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79f58a5de1943c02ab3b84f06a436b10859ac8f592c8f5130772f10225b4541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-rolsae-nutayadd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ae05166f4cb8a13450193aec35cf1df4c3fa7f7c7aaea9c4cef2f4383e2186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mundya-misptasa-riad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c884a939adf86ee837e37bc07ab3ef9d4b159b275d0a44ad96899860fdbacd94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5dce92f973e167e33806e6019362f1a8ff4c61bef884ab37826f90b9f6314ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-min-buipenajaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bab6e8077ea60b4977aea30022dba0b1666c712f19c8bd9b96b11c59e3f14fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasaaya-nurs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e301d111e5f3df6e8fc1f3c994cbf301b0c13ad59e53ac3356c91f7766c1259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f3d52b1be3433610276661c2f975a7a2872427c814c8981d4956949f89edf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146876

Malicious code in uinsu-lost-dauu npm...

Malicious code in teagood-sukuna88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d804a3bbd102352c541998e686c68476e03e08faa6f3bfa2c841637feb5167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mus-btraa-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aaed3f37853c02a3dfc1f3254a6f34f4199ac97c9cc9acaf02b4b9d400111a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-milipe-apmuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5966cc8a756506d3b3eda622a1cad98e27483f9c91114cfdc35e9a15f4ec66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tadashi-tssu-tad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197c46058762bed6745d325bbaa2f2a9373fc8dd5d2bcd14275f9f965dde37f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...