Malicious code in polymera-manuyat-peddat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5383f3e14c5500f9e7b17157de433d6d55ccaf4dcd8759acc627fac12b65691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93f08187d5f05211fbd96e89472cd1d7289d68d38ccf9092196ab56442898d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uyilu-vinliumai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a69752bec600ca65775a4964bd53f2ae67c1663a9c7a331166d9a6c74bff84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-natib-yalu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f02d83f2292e433fdaf0dc33c4b699f89230bf92a459395ba9865adf453d145 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162469 Malicious code in nokire-arjuna55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede07c2b467c846c871c3228a53957df2f677436a16fcfc1c23abc7551b8735e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169349 Malicious code in turisna-sfpsa-derueaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c914eb5ee678590551fb91abc6aa59d319b6c7fe9ef208e79dae348dcf83263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147448 Malicious code in rimraf-dagda-sass-loader-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b08cf31ae06b8cfe4006f906ef9b24fd19a4e3179eb3ac12b3d42f4a7e37ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-bunyan-centaurus-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7041aeb6d4b6daae8b199986a9b05f5f12ff05ec198d264fea5a5274b2a9b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-io-quasar-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463aa37c4b880fa305a254100385206be26e5f5ddb3ee65314eb015fdfac0cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-europa-dorado-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86991b0a2dcb6678d771ebd29e9bac476729c647cd6c41b03821e32b1084eed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-sedna-vulcan-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e49376076f59d319a4d476b48a806f2b480af776828daf05d7824c7c6a124d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-hercules-janus-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546044f30a3c8d955fe920282e9d5666f3751d680bafd4e63c08e0bbda5b156f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-public-version-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc3b96a48c694acf88349bc3335188f0008975d6ce32521775b2876d3896a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117413

Malicious code in endless-indigo-marmoset npm...

MAL-2025-134568 Malicious code in jaja-ronde69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d74f4048bbac8408b3c1bf5ac5f6754975662c7749ce82d4d3f08cbd4cfcda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-99283

Malicious code in endlessgoosez3n npm...

Malicious code in ida-mie71-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6668295f0c751106b00213c8fe49f2603af847833ceecbf303c2f8c42808207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-tek87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98f24f844512443417113b060c71dce22d903431ac560f543b33dc5092b78811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-99285

Malicious code in endlessgoatz3n npm...

MAL-2025-128338 Malicious code in loyal_booby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9697e97da4254e03b70bdde7dde756c4691f1c42f5a7e975f9d7cbc7a2d212a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...