MAL-2025-175557 Malicious code in koko-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf271153622f18faa19ee77a88ed800d3e5dd3c1cca237c795f9307dc4487de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178322 Malicious code in riya-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf86d73b336741055705983a06dbbcc4c98bf649734a6b9815818b6de41cc1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172923 Malicious code in anidata-hapdits-risadpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dcdfead17df48ebe4d556ddd0d78f3cae6779499c6ece838b6fd529317ae9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175483 Malicious code in keke-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5788c3f86a548eaab02e1270561ba77b4cce313186b1ae9569d916f3c54bdf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174811 Malicious code in hunim-satsgamf-ani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6508f9433ad7ae32ac2ce43f15571fc6ba710c0a220031cc259f349f5fdcd869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cfc3b05eaffb6408be64a64ad3bb996365cc91399a6ee2852067641d51e728d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173544 Malicious code in butahu-asfui-dufgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0001d0f1532afc6c9835f18eb8e47e9038fc91f4f98ed4ba5a53efbe0cecba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172993 Malicious code in anidta-hauli-madl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f010788a51fa48e8403aab91487d2d75de720d36e6e1d622eb02808e3dd04bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176034 Malicious code in mibasah-nuy-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d821af68f1d94947763b3d838f74e6851678a20fd9a3d6b7d31c1a65acd749ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afifa-fasaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d1a4ee739cc7939fa78e199a01d85f2002bdc9c1a0df380205d25bd044bc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-bafagsig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5645df06d27acf4dcd9f6d4a6cebfde55ca87705e65ef26553f1e9d6bbeb2c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafsa-daranusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8bdc1a1c80b1625c39e96843c91393c91526d48f9a165531bb69696ecddc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174848 Malicious code in hunimi-satihu-an (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75890a4098a7c181b500e57de66aaec7e1c08110c2b0db8b9cc3836cec87ccbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176200 Malicious code in mufabafgi-sufuafi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690cfd867614b493377d3cbd23de8a8795379107d472dbd56a71a47ee6a386c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173492 Malicious code in buta-fs0boiuna-gaaioif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9dde825cd7c597c4bccc84b778d9f97ac8e0b1b9fcab7b7bbb7364af5f024e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samnu-mmva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36008c1c677f7ab318203e2efdac35d95fe36ebd043303ad8edef947dea75649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiuna-gauafioifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f6daeafe0ed141c1f54050554cab38d85a81db588d033f7cc5def6608cd99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutaufa-guivoavog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607f7a6e3e61b54819b5df9a2d886c3038f3a0969b03f14a36354b881f057951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141465

Malicious code in hunim-satsgamf-anuafai npm...

Malicious code in ksai-kilotaa-ailolioia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19043931f21681be57f35065540f68f045aa5803c19be2efb0ac9213545b6b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...