MAL-2025-182107 Malicious code in gocay-uga-agidugafufyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f4754a1edf27eb0b3fb7470a6b8886429dfcebd232bfd56230d08f05b77906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185170 Malicious code in sonic-oig-mopigafaifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8123ec45e0dddf712f2cf5ae3474008c16029cfb35fa84d667e4db57243eaea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afbaufcdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 761657e617e9706c970df5a5ec9e69a0eb56c083af3a7c6246fe0cf7e14524e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-hakumbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896353d468f4f1125a5e90c9813f7b6b78423c4ae293b18670ffbe2632a9ba4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswadaeaade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf79b82314b5a7a846665f0b40aecb74aad338c1632ea4baad078a2d1230190e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dalimk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962ec2cb48f655922f880ae36e43ddb4b72465a5bd7dd17e59157123faf6f195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-danamifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb20452999aa36e5ef281feaab238e85e6deeb888fc707fa8047ecaadf8711a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-faverufadix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ec345c78072d294e5933d7af00ebfc69684a5ba7ef1be67645909fa895fa4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-avanuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90dfe94e6fb80b17413cee1e1877b79e62220e9a55228cd56b5957c8c62f7c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b982166687ee0e5f958542f7adf33a2df035c2ada89095e87fad89159827a663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-jfggafuayuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbcda6f04a74cdfe960e87440eea2052b93e49ecdf039de2001832cdd60a83e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cobabasvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 639db57e9e3fa8ecfaa94eb104ccdb6a9a4b7107babf26e75d174e68157bcab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acavog-fafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb4696066fb5855d6f6655e40f0709fb4c1c78987d1e577acd2701d7a3d8d0b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggryuyegfjbsgbajtrnnsuegytefbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d05b0d3bc15faeade43519536762bc3294515da5fbb200063f09464c3974e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137029

Malicious code in imodiov-omfi-cafaceva npm...

EUVD-2025-136140

Malicious code in itale-adcii-gnuygurygjhbkomtollujlnrti npm...

Malicious code in flights-lutuig-adifaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7acb1f2c077462f532cc5d4c171f3623da9cfe70dd90366f196d2a707f8985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-fusadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0ad8dc050cbe44a4563bc0c62043790e416668391ccbcdbe72167e911fc786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adilonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 621efb5c927998b6faee2981f322a35ccda9ea79777341f003ff7777e9ff1352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd661555dabb507cb2551fb6667531afa960289b63d90eb644f276688feb016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...