MAL-2025-176447 Malicious code in nokire-nakao8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99938a4104c7bdbfa317aabe590359fcc288489af2d1b95bf3cd7bd0931d2d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172402 Malicious code in hereis-manuic-tauwaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc90a040a286743ee5491f46111163732cd57c14794debb9ac0f1a72c0df17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169460 Malicious code in uafaru-t12iut-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7b36fd7dd59cf0eaea26d2ec7d5f7b6efb7a0f2d6d8757c5023a63fdf6802d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bcd636a261d212129275a49dd602623d45fbb31d2ba96313b1b23015e6234b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169340 Malicious code in turisna-gsad-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 399cfbdc81e10028ddcbe09c7e3f514576fbaddea7b8490e01c4b5cf165f1acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162398 Malicious code in nokire-arhani81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03db4dab919514988a13dc5d5983454236da392f1d67cec3554afff18ca6fe0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a62513a7965543020660a935d367adf8ecf9b9c84fb07dfbf3064c615a89e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-json-commitlint-config-angular-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8cf9b1c13396fdcaed50f6accfb81507a6b264062567666b0286ca187fbe57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-hyperion-juno-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbf8b288371f848df71ed44fa48d183d53ae0aee3876e71ff53088e635592f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115676

Malicious code in carpo-barnard-tethys-halley npm...

Malicious code in spectron-webdriver-global-hugo-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0774f043ca22cb36ef2e6caaee3ed61aa6c9a6adc9279706a1d01ae83d397614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-semantic-ui-pulsar-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725df051562fd911016ab37e1224723c9378e825feb45c51b9138e9a5b05c7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120422

Malicious code in winston-miranda-deimos-jupiter npm...

MAL-2025-140150 Malicious code in buffer-achernar-winston-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a565a391c2111e7bfc57ebe2f777db3411010b05f0da531578022935b325ea29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-getas3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9375208c0608ebf809e4f7f2b4011a2890a7dd2487eb85b6f4d61e7b93408989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133836 Malicious code in gita-nasicampur64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65e95d18a78fd33b155595ddce5477da4edfb1e4f987271604e043987b3d6b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138125 Malicious code in xaver-lengko13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0d7e80c27608f8f6a64bc4595a92a693a8fa057343f027886a5805f939f449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-brengkes58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b863e44c8a047c675799c2e8fe6e0b85406dd3ec4003ef816096e97302fe8e16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_mockingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05cce43ff7e3135e21e10f74dc4e0955932f219cf31e2020f2e9243209e90d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civilian_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbf91fccbfe11d87e4963a2021ea92c8b2e168c820d562072596213df553d6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...