MAL-2025-184984 Malicious code in sonic-kig-tiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5431f41cf3c763e3ba5c74b15f15863658d85189783db3f4df39f08cfb6eff27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-labiomizaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14642c84ee23eedc4862e92c53d66288e02204231e85a0e88766f2b2f1eca8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754386d1ec218acd5a10fa7f9e00cc8099ca5127ca3d3dfa0829694ef1b6b9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179862 Malicious code in lookingan-jaja82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74085e43de1498da9bf4b39aeb8e2ce3128f5fbd2afefd847c92af07c4383595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-142292

Malicious code in diva-turai-inusunaja npm...

Malicious code in anak-jalanan-mdn34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc797bd07db0f9f91442024db4f6ea40639f7743bc8466dca68d9b48fd7be7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176447 Malicious code in nokire-nakao8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99938a4104c7bdbfa317aabe590359fcc288489af2d1b95bf3cd7bd0931d2d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172402 Malicious code in hereis-manuic-tauwaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc90a040a286743ee5491f46111163732cd57c14794debb9ac0f1a72c0df17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a62513a7965543020660a935d367adf8ecf9b9c84fb07dfbf3064c615a89e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162398 Malicious code in nokire-arhani81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03db4dab919514988a13dc5d5983454236da392f1d67cec3554afff18ca6fe0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169460 Malicious code in uafaru-t12iut-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7b36fd7dd59cf0eaea26d2ec7d5f7b6efb7a0f2d6d8757c5023a63fdf6802d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169340 Malicious code in turisna-gsad-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 399cfbdc81e10028ddcbe09c7e3f514576fbaddea7b8490e01c4b5cf165f1acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bcd636a261d212129275a49dd602623d45fbb31d2ba96313b1b23015e6234b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120422

Malicious code in winston-miranda-deimos-jupiter npm...

EUVD-2025-115676

Malicious code in carpo-barnard-tethys-halley npm...

Malicious code in soap-hyperion-juno-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbf8b288371f848df71ed44fa48d183d53ae0aee3876e71ff53088e635592f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-json-commitlint-config-angular-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8cf9b1c13396fdcaed50f6accfb81507a6b264062567666b0286ca187fbe57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140150 Malicious code in buffer-achernar-winston-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a565a391c2111e7bfc57ebe2f777db3411010b05f0da531578022935b325ea29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-semantic-ui-pulsar-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725df051562fd911016ab37e1224723c9378e825feb45c51b9138e9a5b05c7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-global-hugo-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0774f043ca22cb36ef2e6caaee3ed61aa6c9a6adc9279706a1d01ae83d397614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...