MAL-2025-154585 Malicious code in dian-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb42baa3c892949a0515f539a1ed464db000f4391a57e1df8514b446a50e2e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutr-madan-mutriao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f637028afbf7686d141fdb56c13de57894dfd5d1d66afce8a6a059c7a5e9b36f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150613 Malicious code in @miptaa02/fasak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433e94799b1c6b5dbdba37dd75ab9cf202fa6b10b2d29e34485df876ecd36962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154919 Malicious code in fadila-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a226894e106605020c0772f62b02a12859e6bd9967a204416fa67cb11ca457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aabi-alfi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22a3998dec8aecc5148bc8f86ff5c1d8799ba9fb802d562c5d73162f9d9a4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150946 Malicious code in @miptaa02/sfgghhj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05640315667c969dcf5411732208ea33753841cee422a6f200cc31876e082e27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muny-boph-nutrui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd314bf5337c96a95c8023cf132e395957e6a691e8cdaf87a810d6dc9921378e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamuli-lukakimlaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e910c2a8d9b51df3ce436e5a3d5f1e6bb69b0b7e60d2522001588ea8c85cc279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksunsu-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514df3a49f1d933b70f1c02140d00dbb8e1e1c98fd674b96ccbb7517f43e01cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155364 Malicious code in guras-asia-ba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5294e2dc00136de019b5cf2715baec3828307c4d8dc114c3070df97a2bce188a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144106

Malicious code in makan-aiuga-ua npm...

MAL-2025-150079 Malicious code in @mipta1/iyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f77a9b4c12af942ee61457e278a4ca1333a0a384f238ccf0079f2721ebfffe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65fc1dabe99d8ff52bfe7a7ece3aabd505df0e9b07d1243f8ecb0e3faefaa0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162309 Malicious code in nokire-akaza91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af67beba042d9eee283dc847c28341d4cfc250c80290c096b053f4cda3460d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153692 Malicious code in billa-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38faa0c71cd6e5d9f9ca6a6c6123d21ce833ad6734784ae043e4383107b56a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tayic-iamsunasiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9e162f9407023789b23cd1f5e8c525e95932485f297672a2c04bf22782c7f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-adiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f560b972ae8c610e02be75a23ab46f8741e21a0aacbb9ca97960e9434e8220e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gfozsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa184be970060ffb77903c0f1454a0f71f3db08879ad2720b54df62962e623df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167929 Malicious code in teagood-yakuna68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de91f13a85171b956fa5bf666f4a70c34f1fee1b1c43fc5e3c5e0868eeeb8017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tdaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122cc8524dca1c89aa2a24315ff42f90b164df5fd78412a896aa6beb7c3e4231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...