Malicious code in kim-jiwon-me (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09000f631a615d871f4787e2d3082d0880daf64c6838e85a632c479379bba9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-hali-misaln (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1120acfdbe240a49704c6ddc060a43b722ba643786242bc7906d6ac4357326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178159 Malicious code in polymera-buyaitat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86287b4f25fff1a4c891b508c9b086edee0dd19efdf5bf5b847de58ecf237ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173399 Malicious code in buta-fbobna-gadif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92a8341a0221793df186d74804958bc3ded99c32624d569afd1a42f37cf4afcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agdaigoag-agaagisihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf174ae3615fbb25b6cc8215182871df7f60ad9f3dc7430b09d5fc6a94437aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-mutyu-wer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37546b56a6e767f2df39fe3cf3b1de9a648e178c2dc0523c6a09810a737237f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-roovsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35946e3412cbd5f8e9e9c2fe942da6e7209224efcb5c175bde5e71acfb126db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177792 Malicious code in polymer-arash-millio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f838470e7c6e82a8b18dc6854bab4416b79a81276510daa30309062538d145a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173633 Malicious code in butanaih-asafui-datajuhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ef6abf85c8ead870cbe6e6df740f76759efde7afb9c7bf9b0058afa1734048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodain-sanvgaunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d3ae7e37f89dc4de1c1f358b4fbd2856de89c9de6fd8fb57d089d68bafee18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-diharuray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb7f0d470482cbf516f37987222d7f2cb4aa32a2607f1b48234240686a6a50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-aogdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7b1e02cf831d9a7a3e6a68ee3f1c874e7ebd6428964eb7ec4dd844a00c8a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daarde-giddafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5550e40fd505cce4b6db1c536efb66281a7a48907b97a5c56ac63d35933078c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175861 Malicious code in lia-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9491b5ce9874eac4f7e7f194f1aec23731569b255cfa7a3a10b7ea37afc5bfc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176915 Malicious code in nurai-sutaf-dafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27f95a19f496852b0363c98f7bb7e79e3458feba9832f7a56895adbc7c0e353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be38d1f789798a2a7aefd55c3ca212eba2ef60d64f2607c8c4f339cf5279e9ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174554 Malicious code in haritono-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ecb1296ef2ea83f548d479c58d0bc2df1ecefe888e0e81780f35cad71db5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172856 Malicious code in anak-jalanan-mdn46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d3667af89882d5cddb35ec8ca2aa4856afc116798e0b436c093dc3bba57dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-134998

Malicious code in zaskia-poke14 npm...

MAL-2025-175636 Malicious code in ksai-kiloa-aio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0581076b83ecfb9aa1c98da7100111e994f947105665b5ea2c03561f955c1f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...