Malicious code in ita-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector decec8c496674d7d007367314cd64597e8e65c7e5f4e83463bab14f071892093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df692b5b8bd660001b29b8b806c589375a802da13544c884006f51eb3b1f8e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127f3f271bc2319da6c5a0342b1c4969b528dde070c4875e638d422f1061ad15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-mkota-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f075f32bed307cdafa600579cc9c5d0770709fa0e9d264dbc43ecddf6da8ecc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c8c501ae669cd0e20ce34d604052a00ff1a11ecfa298dbcb585c666795569f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d516e6bbddc780bfdabd628a457b02526d0c0bb203311d3c9e43517287fc062e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144106

Malicious code in makan-aiuga-ua npm...

Malicious code in teagood-nalikami14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 154aaa55518146570121656eeecbcf277c1e95ba85575a35aa17e3e79bb155e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270defcba4994b2216271f8367946838efe8d764c0c560db8c83067058134bc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20bc84703c8023a6a14b802a969749335cdf6cf7defbff1346f5422d0a4cbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-nalasaublui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9afb64998d89fafbec7f3f31f401fcf208ec62f5e7c4226daff28da85e9c1c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-chin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317004d3fb4abc8d5f9671d92af25b7bf69775df9af923ae3c7fa05e11e7a2f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbin-nuyagd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db93a50d1eeaf800a6ac0527a7ff34bc000185d0039887ab707cf760933a7b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uyillu-vilanun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9749c2b0ab9225d3fd7866332f17155c2e8237a989b6f044eda308eb0cb8313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150625 Malicious code in @miptaa02/fgfgg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 477b3e70acdf81e55ebc43e759290edfc38f7b1df87e5e031698b51fc8418f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160191 Malicious code in masioaluan-ofa-batouila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65e96dec6077f732a854460fefeaaabc2e473daed1902075d9e4ef0a1113ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151362 Malicious code in abina-amogoi-anuhuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e06943940963ebb199e31de269d6d2b0eb50ba4782003937bd563667282579c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161984 Malicious code in nasrul-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db4a7562f72c4d37d39a1e7b67db60ea516093d6419e88e56810f3400b211d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160336 Malicious code in messi-sdubda-sdfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975abcbaa1f057db3a7715b3c47d395287dccd5469c67623162cd045df96948a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158068 Malicious code in layla-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa7b8fecd187b11d2dc7fd6a3ba8d95eabbfa27a98d032ebe02df0f1e1f668e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...