MAL-2025-153653 Malicious code in banuni-otaima-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ca0c63aba15c7652ed71423d4dfa78d22fd03900cb5e2030f2248e37c360d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150915 Malicious code in @miptaa02/reyua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35718d0b3da1196ab42857ea0935e4a38b96e7ebbdd453a21bd2be6f7421a9ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168934 Malicious code in tehaah-codfd-mut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc73805735fb6d8aed233b3cdf95697a663040559788093c4564c6d3127131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164271 Malicious code in piluvaka-kaiuablbu-nunubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18700f1db2e3534b2be7afbb74913753f127f553c4ef772e0dac7208a464339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170228 Malicious code in uyifa-iaydut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e437da5295e91300b0f084b7e78b334dc3d20ca6816b0f51adc4550d80ddc8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170173 Malicious code in uyafaru-tauimat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a54da88919ea5c3cecddc6d600ff9851d0bc84b71676c47fc55be6192e7de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150900 Malicious code in @miptaa02/rassasdzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1987150a291682ae767d99cd08fbb98adf49e5b0bfc408e8093cd99be9e68682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152957 Malicious code in astia-alabokio-moikaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d308aa2f67c9baf0c60728f369b77d4d3bdb03734e61e4504de19438397747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158612 Malicious code in lookingan-namakiki96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26e7d47409b62247d78f793f648d3ee82fe605505106c197be0441d3485d712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155895 Malicious code in ican-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4024c214a4ff6174ec326b9e703a89672105c0388941c6ae52c46bc4987c09b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168191 Malicious code in tealove-coki34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa9d039df00a6d57387709dfcdcd3aafae20a77066b280b69962cb2bcd4def5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragia-mudahi-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a49c363aef4efc43e4f5a8df560a8a9ebeeeb0bd286245cccbbb9a9da98efd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muny-boph-sadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80843aac9e7c027e65d15b2b8ca7e2a63efc32a6d063601c10fdf57bd7740a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122301

Malicious code in sagitta-standard-corvus-slides npm...

EUVD-2025-121262

Malicious code in thuban-sails-vuetify-nova npm...

MAL-2025-143329 Malicious code in hermes-superagent-google-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839f7222c322fbdf927457e0e47acfabbdf8739f68a3152c7bc8f9f55b0b19a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146268 Malicious code in pipe-rehype-browserify-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d69b84626d618a7dcbb56919d1de00304d16f4b5a4aa87afe877e114e520c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147369 Malicious code in rest-ursa-chalk-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa48b21337ae065011cc4a71ebeee38451dbc5d83d5039acf8de668c616f84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142502 Malicious code in firebase-materialize-morgan-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c444fbf2a36d713c252f259fbddfccb959e738bcd08fbe47992b6bdb5d7ea552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-fornax-nuxtjs-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3541086eebbe70f6232c01542c1c747f33ef2d0a56945e336d6ea43c232df603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...