MAL-2025-179937 Malicious code in lookingan-nanakila120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e4f19be8bdef8d85135022dfbb8d785e27d9471f3cd89d51f873e9be23f96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180186 Malicious code in teate-thy-sonic-bazer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e58ed8f9415ccd9b15cbaee3f16790b39d1557099a06304e41cdc4cec7cf6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179483 Malicious code in anabuyil-inanhu-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0631d72fed46cdb91ad5762151f9b9c07a819a6f1faaabfdfd54f69709bea34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181059 Malicious code in teate-thy-sonic-voswab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f61512aac3d738995c492c73081860060a6e8d6c4c9d05eb3e3457bfe6a1d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180449 Malicious code in teate-thy-sonic-gutaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa8fa713f088cc3b663ff0d9c601a4d23f28156feb8c10246dc03f926f865eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-buyau-mgis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80399cb65d640c562abcf8827f52859dca3711a08c22417f4890e440cd8eec7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770be846896acb554bf1ae374aae36b8a8e221c2d3380445f515ea6e1b36b9ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-aigi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d806c68540240389ffcf3c27fe194d7c22303abb082c96d6302a3616bbadf00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-agafafaagmmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4bf8cb61ffea72da49d216cccabb7364250aaf83aa9c235c26a35d6560d2902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodan-ngasa-naf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efc7ed2281119963bcc90c4e6ed0993917f55f8aaefdfedf2bfcebd52add2e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-maayav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80acf1e13e844c684b5f1547c4d015ca5a996289988791cbf41c059c7dbfd672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176239 Malicious code in munufafai-sui-cagafs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d65323b3cb7209f68abd6d988f66227f5f5ab985186e04bb01f56a4e1b9815d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178511 Malicious code in sahuar-satidaf-fagubaiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d45f1fb8136df3dc7a8647476a516bbf215f712c40d16602682623bd592847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178585 Malicious code in sahunim-sat-fadabitu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba4f5e98a0fbd0c63e804d156c2e539bdcbe9cacf6798be083194054b0072398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141813

Malicious code in goodain-sangunu-nutagaiga npm...

Malicious code in ksai-kais-ajiobnolaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9433198100c1be04aaf3272ed26a7531ebb9a76e723cfaf5e07d55ce5e56c8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avm-ravafavuc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c701970693286ca6cace0ea509ba93d269987c9ab09ff6d95caabac6385278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173725 Malicious code in butauahur-sofauiui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc423753e6051cbae622c66259444fb6e66e348cf529cbc5ce185df3646b2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176687 Malicious code in nuilva-bavaim-rasysi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d6deeeeefbb268b867cacf7220e15990d59fb1f110355d1a71251d0dcc0f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174847 Malicious code in hunimi-satib-nbib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674e2a206b0136a27d892198584cbf4c1e95997b49bb05c57428bb0cc1697bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...