MAL-2025-172758 Malicious code in akuuu-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70adfef646c6c52ec2969c35231e491b4f311f1070787dfc6c2c432914161da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-mem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcde3759088b77d57f90920cb6f1f816139d5c49f056cc9bb6b3cbbc8b8165e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da63f5f704b0d08ef9e12097128500b87af30c873d59c4ab35e9ae479c94eb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4e6270dac29a8f84fa31daf4e02e94e53f3b2af467cbf55335038b516c0347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-farvadvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d9eec3c8383412bad75c82dfea73ac69790d96b0ea5bc2a6438d1b569950e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440486628efcb099562dee61bde40f559f662d012ed61572abbcc25503ed16cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-munvda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38f10557933c09c94195b2470a7b0be5142383d678aa2aa087e522fbc7410c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gigsb-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4204437d26faa4360441b06e58b022cd53b658b1a0959c0494d54f3589e6fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satug-iguamgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7b2695781a2a761d10bc78a0faa7a0a7a5dc75003e1b8b22b7d4a0583fb34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-minst-nuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2c593e537f69f0e826613574b64f37f3ff5b6577bb408c6b9dd8fc6087c124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-ugafaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30aee34cc5651400f9e3c40028fd578ae287da983c012c7c64c86f10f2af7a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-radat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8c866265dcf3d1ba48879ad244df3154afff2e835f95f4be997a019917ac15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfafi-daujhsiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9dddee2e014c6d12bcbdf3e4167393f4ae1b2501bfef24202f7a698fd1b6e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-afofafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa77974690ce84b18547b1e266d307bd382a3932f36569d53bde2d77f2aa493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gigsggb-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dbd0e8b3b051874e6e257e11f3b95a5c979773cbee43e9b849cb912ad293360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5757997a638012ee69fac67c9206bafb9b97e16491d065dcddb9d9a143669689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tug-iviobbga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70b6f74a96dbd1c336916ad001ff13ae29e515feac0cb28d391ed8ff5ed97d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136489

Malicious code in sahunim-satudfui-fadafa npm...

Malicious code in hitachi-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b90334e7c4e59372f4fa1e7ff350940e71b04b2b22b098683df5f48c195795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufai-suffi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57620ac9350095f2d4011cced5a9c577ea8809131d3c2f81a689ad7b7452acb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...