MAL-2025-173544 Malicious code in butahu-asfui-dufgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0001d0f1532afc6c9835f18eb8e47e9038fc91f4f98ed4ba5a53efbe0cecba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172993 Malicious code in anidta-hauli-madl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f010788a51fa48e8403aab91487d2d75de720d36e6e1d622eb02808e3dd04bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176034 Malicious code in mibasah-nuy-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d821af68f1d94947763b3d838f74e6851678a20fd9a3d6b7d31c1a65acd749ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afifa-fasaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d1a4ee739cc7939fa78e199a01d85f2002bdc9c1a0df380205d25bd044bc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-bafagsig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5645df06d27acf4dcd9f6d4a6cebfde55ca87705e65ef26553f1e9d6bbeb2c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafsa-daranusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8bdc1a1c80b1625c39e96843c91393c91526d48f9a165531bb69696ecddc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174848 Malicious code in hunimi-satihu-an (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75890a4098a7c181b500e57de66aaec7e1c08110c2b0db8b9cc3836cec87ccbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176200 Malicious code in mufabafgi-sufuafi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690cfd867614b493377d3cbd23de8a8795379107d472dbd56a71a47ee6a386c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173492 Malicious code in buta-fs0boiuna-gaaioif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9dde825cd7c597c4bccc84b778d9f97ac8e0b1b9fcab7b7bbb7364af5f024e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samnu-mmva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36008c1c677f7ab318203e2efdac35d95fe36ebd043303ad8edef947dea75649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiuna-gauafioifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f6daeafe0ed141c1f54050554cab38d85a81db588d033f7cc5def6608cd99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutaufa-guivoavog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607f7a6e3e61b54819b5df9a2d886c3038f3a0969b03f14a36354b881f057951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141465

Malicious code in hunim-satsgamf-anuafai npm...

Malicious code in ksai-kilotaa-ailolioia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19043931f21681be57f35065540f68f045aa5803c19be2efb0ac9213545b6b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178587 Malicious code in sahunim-sat-fadaiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ac12c6a55265ea446410aa31eb896ced1f8f2188f9cbce4ccfd1074356a60a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62668dec013e48f09a70bbbb74aa19a18c27f415b260a8ab9399c154ef409d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc3d96d73faae58cfe1ac3c3892e8944714686abedf9ba9013acc779382b03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174805 Malicious code in hunim-satib-nbib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0abe6ca3c4c472f145b7fa827d094dc1a90e001cd2a1f89aac951a41b443b9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176260 Malicious code in namacida-minuday-nuvadyat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9caf16ee627afe486c3170607ea1f5cfe184c5eced83146ff396d14dd1ba0c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177700 Malicious code in polymer-afia-gfga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0a3496c46ea8137bb05176878d81586c6d5333b30b3d33459c916bcdb3107c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...