MAL-2025-172060 Malicious code in apasih-led-pokiari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5b6f747aadfde8cadde909f630ce4d92d1197b143a27283f5f64c2029b2afa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172512 Malicious code in verts-otfioo-nampogfai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d8120514cac7185782483595677e4e4960a843ae9836522b052179cb6ff622e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ahmarmansoor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b47fc174277b291cc372bf9ec158ddb3989ffdcad7ccdc491c30613046397be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kopling-apalagi-njirr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fd418723ef9ba19cc389964424d74793430160f555c623d5aaef2010e23469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171899 Malicious code in sophieevans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0422e78f84708d43166513bcc7e990642fcddf2fc4b35fa7982ffa44dfe582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171844 Malicious code in setiaputra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bebdfb25a75cc28e822e24ebf9238c350585a29fbf5eb2ec4a098e3bded5cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146094

Malicious code in ahnafsaeed npm...

Malicious code in akifnaseem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21476b4696a8a5ad817398926f49d70cc7638a75f0627e3c218cc8c502095634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aislingkelly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b99601af91ed3b044dbe2f3ea91cf87d6be39a11a48b9b7951a0f54ea38e941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lorenasilva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cb76d42d3f9b43e5497fdcfd48a3c8d197731d9d6d5f4d131a97b8b78b6d83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170707 Malicious code in ahmedlatif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9506a44d40cfd3114b35ce281dcee738f149bbcaf39e77a8611bf16676776ff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170882 Malicious code in angeladias (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c94c8933589d1045de905e5ceafeddf3be0b42eb79785fd87db435351cd7a8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171165 Malicious code in enzosilva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a5c0d72bbaf47ce40608bedf81efb08e20156ea0ee9baaea8da5c5067c499e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafeezaziz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65dfc7fd6f7dbb9decfc14ffe1d2558163aa5379b7cb3475c5a0707071e96a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadlikusuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1121d453077af5f0d398fb8f1ae835cedca4979311a5030b99c1c44974e1186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fsdrskaisarazeem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3acf7528fd923d2d3ad0856a989bc819220e34240b95cf822ee36bb2523a1b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juliorocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72520aaffc22fc0189d0d1454e1840933c88accc3a5e80109cc3668366d68c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ahmarhassan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 045bd3bcfdd9344b2256ec088980cdca2b6be5a56676b39dfbaca5c7227fcde3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146197

Malicious code in aashiksharma npm...

MAL-2025-171318 Malicious code in ibrahimabdul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82a67aff877da9cc08b2a703b0d60d7df85b7263995d032e1bbb7ccda35adc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...