MAL-2025-173790 Malicious code in butry-yust-nutrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538ec4857d649dd9f18c7a6ab62094eb12556516126280c0f6f98635ee5f409c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139727

Malicious code in nokire-tanjiro47 npm...

MAL-2025-179037 Malicious code in terui-umur-miti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932373ce00cf49d74f72dd6886158b5aa409ac517c6985d4ef3b706b99a2c1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172971 Malicious code in anidata-hopanud-mafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3790d7abef5c1efc7381169401fe24687aa7c80eeba68cb275507d6524ce6c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172822 Malicious code in anak-jalanan-mdn12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56defc26da6b41423eadaf8aafbb6f5ae4c4e231434d3bf61e89b46879522cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173119 Malicious code in budi-kont-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e98aba16161e873d6867f050c544f791d91cf8c2556282e5a910dfd9d93037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141161

Malicious code in kapo-sadamuda-mimanua npm...

MAL-2025-173562 Malicious code in butanah-fipadsfha-hafuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e41f33560ae9fc53a17900229229fe87796978994b04af4d34530068b0db0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172969 Malicious code in anidata-hopanud-mafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c60f892bd912ac7f93b3631109eca5ecf685e088b4a511ce2ef09cf047eb84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-bofafanifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb988625790eedf739a3e3937587e707dfaae22106f2ac778a62d52579a7d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172726 Malicious code in affri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66131e784783421656cc31ce8d41a75b1793f763b27b4402d9a0805a9512d0b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177747 Malicious code in polymer-agiaga-afafafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295afd1a492b54a4a3262a8f646b4d5190c524c707133cc666318929841494a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172890 Malicious code in aneeeeeh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8a3fb8fe85907c7076f2baa1a1486c213103504369fd1949a43872cd06456b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173001 Malicious code in anidta-hauli-mudli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4507b938aa3ab7640abaf9038b5901ee816bdd47ac7f1c16dcaf0af9dca832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-manic-tauwa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca2cdf1a1dd98b639810500911488fbde6d05b907aba02ba04ce48cddbfc392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aimannaseem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9651067ee4c087b5655f869d2183635e292d7ab22b1e6fef7dded056896237ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172032 Malicious code in yudiputra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273cf005fd4776f081cc0046ea49c3983c9f386484b30dfc1088eb310e0a3a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171764 Malicious code in rashidabdul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e94d8706acbc901f025c540e831898dbce28a041895f40692825cec2f0f70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuna-mobhani-aymaoomsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6deb679a5c00071eba7c237a251356410a017373498290a3d4d439684e06114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabi-aibia-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd4087f82cfe1f0042e05e33c3f3d231764c7ef3ac274603bf0abdd30b8682b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...