Malicious code in alvito-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d59f782ab14989aaee70585f256d0af25147af6bcf126ffce592179a5eccf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc292fb78f0c66c62a8c124d99f4d5a56ed0a528ecf99b40e11ed11f0451cca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160865 Malicious code in munidr-nerf-usual (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31862fe0deeb39693794f2da87672e993e807fce88ceaa6dab177086a96b800c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153082 Malicious code in avminah-fagias-dfafigika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158ac61f01428a458488c353ceb28443abfdf391e7b335ce19a709ec3bbc1f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuyata-buad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b54034548d6144a32a867690ff5042a61725f3092ab3e0170b6202560c963b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-148227

Malicious code in tealove-okta1 npm...

Malicious code in kuinsu-lki-kopanaiumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490074225d5540ad609d0807a83c7a50c968c9c734b21ae0d12fe728b35425c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-asi-manuds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad29bf7ae26a22111daf00112bc698faea3324d756ab0edc68d338514923ca96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153807 Malicious code in bitha-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fa5ee23aeb8a99004831307132561fc7d17a8d30855bb1fb15a265def78dc07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimmn-pigafofga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de9b9346beeee278c398c618e30f0a39ff6f3d62f634b507da3248e17b7aaea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168327 Malicious code in tealove-lady21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf47ab2804180ca3f68e644f563af55aa0970c6dd4a350ac433c9e4d0e063f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152553 Malicious code in alvito-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfed422a2d43af715e3a4838cc443bd56393ec75580601ca99bf21271dd54030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152743 Malicious code in arif-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abbae48b7afede2b605bd36bd490635b9775b3440b588d36c31cfc9bdcf91f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d516e6bbddc780bfdabd628a457b02526d0c0bb203311d3c9e43517287fc062e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ded3dd88e846496ec5f0563ce1532c8e4b4c6d040c837bb04918791eba9437bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166198 Malicious code in suharta-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2743cdc94066a07738dc0034a14de2fc6872817dff8f75c7880db5dcdb7213c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansida-nomafdi-munau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a968dd91562dbce45072380e709dc27ee1ab0e3845726b9e466ec2ea1d4e92c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbin-nuyagd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db93a50d1eeaf800a6ac0527a7ff34bc000185d0039887ab707cf760933a7b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150079 Malicious code in @mipta1/iyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f77a9b4c12af942ee61457e278a4ca1333a0a384f238ccf0079f2721ebfffe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makaimaan-ania-gugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888ae4d43c2296bf56306bf1df6d694dc8487234fbfd9c857ba9d83832648f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...