MAL-2025-174057 Malicious code in divata-tugab-ivabitnfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afdb4bce660ad163112ef03c3abce4698fde196074742df68db644e4366036d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173424 Malicious code in buta-fiona-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f62002f395ff3aed799fcbdda1a49ca9a1dfb660fd3faed3e8c42d55b08a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173957 Malicious code in diva-gbai-imbuaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 864d1f5c9b0ef4929604d50ab34e0df01fd6a97ae7e25624ad514da8ffd87978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176900 Malicious code in nuragi-sutaufia-guivog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4478bf819eed7019fefb4afffc5e52761be76341a2a7106797018be5e0d17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176194 Malicious code in mufabafgi-sufafi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5642870e0d373c2fd8fea1cea5c9d1df5c3da386ede26b3ff0bc3a3669df0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173400 Malicious code in buta-fbobna-gadodaafaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea19aae8e27a09dd47e6dfa087f23bae3b16951046d23fd35c8538c338f65b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisoim-oloska (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4247d9ca7b4271fa582b7117b3f488c5be03ac6fd1aafb384c7262d5abce367e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognbamoah-agvsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f128fb28785698c8427fe9c172333999324d56290342b27758f7ce80e125d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kiloa-ailolia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 785315533d065790ac193ad57b3afdc3604b1d083c065115ac4236197933be78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tusintabi-ivna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72554a33f3e580dadecf1fc1b14ff11a1d79764c3efd1c6d1977cfa6039dd523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fiuofoana-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0d3e88a09ae09224f62e0d11e3904f9ec474ef45d463122f149aef6e5d24f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-haulid-muba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4226df45611ba3da53d26297bff297365bb4082eb21f69354f814af4d23c7441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8a25e534532470d23c3c9fc498a7068ecfb7747f068305e3d03884cbe45a30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3a45d0ca0d783b4bfb780ad04c5e9c4188dc27cd23e3477ff34dd5ede755e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-massage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbcfacb325d25d05d8c6f3c77d4a7d801e7db9b993bbf8841d407d4f807eb3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140170

Malicious code in miftah-mipta19 npm...

Malicious code in sahunim-satudufui-fadabidant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbd43e4d073e6afc6001e2d4cac6000c316e3b7c5ad3d5b4c41481dd13a9e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautu-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf177c882841f4892fcd87fce7b1a0c5d4771a6a27319d0d356c8a45d9240df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tuai-inabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8303fd0fb7c22fdb154abbbd2ab9a23d778b1516c01d50f3b5db20f237d20c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaiso-olakiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091e6cf64753d224b2cbfee3ee76e9206de377a28433d561271b4dbe49d2bf4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...