MAL-2025-164201 Malicious code in pilka-luniu-kanuaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01c24e8bf05af404ee5b8617f9fff997d51745bf645ec383a1754b01f0cde6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156064 Malicious code in icha-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 681c08c3e6f28e6be2203a3382c9c5242aceda8eddfe9cad5156fce6c682ac58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-yuki-manusua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d5b8249276827d9956620f96cca2d7f95d5c5de7dbfb10f180a838aef055c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce02fdc20886b38a4bfdda6b569852a813869100a6a868f3fb1fdadc667f65b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ota-uo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cefc86278bd4b2833be8a9a66f22a0826db5a17d6f9bd4296ab429f1989329e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466b28313e39663d135f2ecaa0f25184b18478be6afd0042020725fec5e8831e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f18a3289fa860fa31464f3e375821ffbe198d5c5e8d4ac56f1a2e45b386dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jimag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc04eb44ee43d755bef265dca6e73050e6f0673db7f117e07f932ddaa28fa97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuffak-angabofi-gu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95724d3cc4caebdee22980bc76861c7623a54d503b714097505dc7e8c4998d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146530

Malicious code in verify-aikun-misika npm...

Malicious code in nasrul-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ff90478af98dbce70c11c0dafb90c7e20f7de05daf43dfe362f9fc027e3130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143734

Malicious code in nabuf-otomabin-nojaggu npm...

Malicious code in pu-trud-mutiara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe2200a05c83d21d3ec4533684ff68b1dbf760542aebdb3021e5a9ea75b1f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27dba0c540e6bbecc935b6bfe63a788ea9ea7be19cec00f6d570fd721daa49a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3811ea649b7a5929f7d28bbdb637b4f800cc8ccf73f759ddcfe2852955d1c588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magu-naika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2296d0d429edb82e356edb6ead8411979795b002049cc2df0357029f63b81555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otau-uasuagffdfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335086b4158849f8b2c3bb983978362c3e70fd6838d094b4c6c90548f1fda471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bdee9a3265e5e25f6daeb8dfc83831b8f193881a5d1185fe165d3c87b0e8085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-g0aig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e14622f17b58058a0be2513f3537d53a07a3d79536bf13ec52d0859dad9ffb56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokiragne-asafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38c7d55bd357a512ba67cb18a068ffa8d9d017688e67170513bd9051ef7e318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...