MAL-2025-150028 Malicious code in @mipta1/gfdxudgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2aba267829517565c7a9e3de307c0691d54deb92b8b5bb5f9f6d02b5ed0978b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154894 Malicious code in fadila-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de9ec139e4b628d6245ef52ad2f14cf89a1251f5feb31ce1733e488bc12ebee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167446 Malicious code in teagood-nalikami46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b24ad4cbc932725ee7d533f2d0782b0cd36b960c0479c4a90f79db107464bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160271 Malicious code in maya-tre-hijau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252c3310f2d2591b0be25917e6015f386995f8f7886f6ad080230fdfaba203ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385349fe09696a89c21db68cf49ca78bbe9a97ecc18ecb7334820428a512cf82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ojeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52668984226d075a697ae049030177628f2e38a21c72fff4025def15fd7a3648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-149951

Malicious code in teagood-cuekin91 npm...

Malicious code in mansila-tdhfla-mafgsfdgghjhghla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313a4f74e26e481785fa14edfeaaeebdf187683f6fe8bb9be8a5222252a0c5d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gfosd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865245e08ef95c42fd4b6349f36cf1e659691a3ffb1b9aca3d02d3f19da70dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-149050

Malicious code in teagood-sukuna100 npm...

EUVD-2025-147219

Malicious code in uarg-masituhai-suf npm...

Malicious code in teagood-manaki99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1df2624be20b8ee8126b85c74edb48a22c8b19fe664aa95f9cd75211f9d25ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-149950

Malicious code in teagood-cuekin92 npm...

EUVD-2025-143812

Malicious code in nabuf-otogamafian-dohjau npm...

Malicious code in lookingan-namala65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d4fd24f766db186fd084cfe9dbd180867c7d37086daa61d32290053ab14a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167155 Malicious code in teagood-manaki86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e41865f5d9b2efb9b7cefdd6ca13f6e5fa7d7312ee9a17131396039f0f3ccaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166589 Malicious code in syahlan-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7c235636de257d735b80ef3c63582d8fb79046505abba396be986501e72ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a4c2c1f39b7c391003d20318eed1ec4d099aabde7784971fea9292d0106bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160995 Malicious code in mursai-bduasrt-ssda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a3bb3d40df775d5bd7467e823a723ada5f9b089840510b33fbb70a2945c640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169780 Malicious code in uinsnu-lotiupomi-kilabarm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d3a603b813b196fbe9b08f9c22364fe9c42f9c9a7a8606f7e4111278eb7920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...