MAL-2025-178254 Malicious code in rintono-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1db80ee19e06a367ce2627eb7f580b5586d2a1a7ff28a82a0383746291ce1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175447 Malicious code in kapvino-sovni-farvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee891e0db4b21ab22e6dfdfee333d319c16dc4134ea9018227aaf04f4baa2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178140 Malicious code in polymer-tuio-tesas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d9810c4ae1a439c9b00b696a9c41090424a272e020c8b204d09b809632acbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-minuday-nartipaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d5c2e7a6251e262b0362956fe8b72844a761404ac92f89314a759e83b9955f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pzp-poim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98db267d2ba008de7121a4995d5b066a4dd3cb5a9c6bf9bf29cc8745d4365ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satigoigof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71dd6c09245b21364603e267e3258505570b6247d9d8fb66675e3820e793af5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6738e894f79b0190cd778b9807237bdc8f3f34af884723f89b4e560849a13c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175325 Malicious code in kapvino-sofgdi-ggfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e40222bfd8d8413b0ac826a20df914c84bddd347df8c0f94ad8f9bf5112c912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178056 Malicious code in polymer-idasifovagfa-ratavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4581f9f03aac1cd7a9fcaf9b74dcffdaf1b399274346f21a419e66ff6fb5335c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174804 Malicious code in hunim-satgmf-anujaafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8efeef5acf0652afbbbce2d59b78c5fc4b80005ff78b20a9ef463267009c7006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175058 Malicious code in kaka-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a929c2176564a4d33a26cb112ca9119f23b3f11d4a9ffbbc1de803f0429eaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174290 Malicious code in goodaan-ngafsa-nfuabaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43a485b2da2542e11c8da2bd046ada6376e47b6f97217a8bf0d463303e6942d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175852 Malicious code in lia-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c822f380ed60615955c7e8f9dc061256207d584089024d0a2a3492e60afd6995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136352

Malicious code in sgoodaini-ngsa-tufa npm...

MAL-2025-178622 Malicious code in savihotn-safgdfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e261ad914ee49ba5502e5f40f9f86be17d11f96f88018a4b29ff3ef8659f923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173545 Malicious code in butahu-asfui-dufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8424c1a0d4826f1d2c52ec7f856e97c1e01d279a16e8b84d36af6ebc46a27712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173990 Malicious code in diva-tugai-imiaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf48c28bc97688f930901c1cdfb2193c61d83b737b40c85f271f0582c07191c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177636 Malicious code in polymer-afaj-rfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34346ec44c1f6cb6dd07e2cdc8c89b362e325b617d49870c1b2443f014c6f751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanabufir-softafai-dubut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795237d56472bc0a8c8f21f8a8a98126097cb3ad2304f5db6865ac5ed58f757d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174226 Malicious code in goditu-tuamva-dibud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3dd4d18f787ac64367fe6a36d936efd11ac679e074dadb1a4d39584adb8897d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...