MAL-2025-184267 Malicious code in modiov-khan-avcafivaivuvagavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f387025f08622866d5e7d334b2064e4902cbd4f2021c00e41571444e25268a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183010 Malicious code in itale-dci-rr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd9c5061aa2c7a094df9d44f198af6643c3f6b5d139bfa22562b8896bb69fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-fesdit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda9a752bbdd40b301624090921fdb80af7656c50a3c0723cf068ae5e9afda75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiut-acg-avefvuug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf696b4d131077819178b0bc454e10bfca36c8f821fc5233e7570c6168de812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180961 Malicious code in teate-thy-sonic-tewsor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d5a0181564259139bea2ebd8acd73f20e564ab921f81ff0e8654ad9963c4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179616 Malicious code in igsboloa-minisspe-amiialo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ecef925919df8bc37f8fbacbeabe3db82fd866d7a83773ca7104bcc19d05275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180829 Malicious code in teate-thy-sonic-parlub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0decd21a301fc2bfd3effb61c8824c1244cd7678312cc02f887b4bdb854b482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fioana-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc18883308f9db013a4f089f25a7dbe6ae7cfb49f2b41c0c33857da5abe718f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6467432729941e6eaca9157f04812bf3ae5f2501e370c27a52f1c942bc4953a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afriiiiiii-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf65810d017ba413913c2cc1a006c144f451d9a179271fcc6264d83c75773fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173345 Malicious code in buta-faina-aigagna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1153f848eac15890d8e96e8fd1ce2694fed5eb8d60dc4984cf77a7df6deda7db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173591 Malicious code in butanah-fipopha-hafufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295a91161cb8a11c7452c3649a3c576a28043166056086bf68486aa037aaf302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144597

Malicious code in augis-pod9r-muapila npm...

MAL-2025-172058 Malicious code in apasih-led-pokia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f09b61a597217a5c8761bb130b3706a9483805a3bef8776d2976e3302d98c3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evieharrison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26451bd47e2a94ae162fb9c9493ed833958209bd516b61f207815da78f072278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fcab47d573bb4978360bc559c7eea0fc7b2a48b480ae13343b4bcaf27e52fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nutay-ko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256df9b9c7da58e8b2c1f9a9cae09f2f176b88c7c837514d8cba2410abc2584a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragia-mudahi-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a49c363aef4efc43e4f5a8df560a8a9ebeeeb0bd286245cccbbb9a9da98efd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muny-boph-sadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80843aac9e7c027e65d15b2b8ca7e2a63efc32a6d063601c10fdf57bd7740a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safifda-munaria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a405c70340035cab0f1474a1761c3ae4eb55f91c57008d65f2bb4fea2779ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...