MAL-2025-169394 Malicious code in tusaaya-sad-s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ecb330fde5fdc2f3a08e31cc0a9e78addb6f575b2cbfb4648f0d30c987cfe3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-subscription-sqlite-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e2511e9f9a27ff95e6c98e35f610b47432ec0f22b1470e637ebe6d56afe7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148257 Malicious code in standard-promise-rigel-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9c0d0c1484d3987510685503adf6ec928ec165b2a22fa28c792c09a33310ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144152 Malicious code in kaus-nightwatch-uninstall-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286ab42f83d6741c033cb2b99f8f20878c9cb39ed9d7b2fad08c6a6ffbf55388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147211 Malicious code in relay-virgo-native-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74bbf0b82d1adc23a5064292078fd7c51cefe3f55c09e41f8da9d5714ed67dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146397 Malicious code in postcss-loader-halley-middleware-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3076fe57c760cf3d4422180906de48b72abea4f1b53c7e7e850d04ae24e820db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145948 Malicious code in parcel-async-ophiuchus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f6372ad132250ecbeb525e54adf13c404c2ecbfdb13bc67991250bf8c0b04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-rojak34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b655193d7f860c2f48913703d85ab28f71718714f26bae25918dab805f30cfe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134516 Malicious code in iwan-tiwul57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b1d895cc137fefbe9c28f5449d1f2990682621a35296202c2b75f3ba652891d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137173 Malicious code in surya-tempe79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de2fa48054c28f9b687366ac1b4189359cd6ef8a537cdab725b2969339804d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gigantic_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c4da9a9b84268b9536c4ed5bbd6e7fd51d68a9afd5ec0ccd2fb5182c14484a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128110 Malicious code in kurniawan-toge54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf8103bd4e0c82d53dbad50a86d39be97029a8ff124c4ea2a8073f87eb3e6d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-94259

Malicious code in vida-miemee93-breki npm...

EUVD-2025-93600

Malicious code in zestypossumz3n npm...

Malicious code in fajar-kue27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21d515e15944163a5d6ca38b88f03b7afa31f750ebbe446baa2d70d0b63d322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75755

Malicious code in safeclam-teagooddev npm...

MAL-2025-107658 Malicious code in quiet_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ba595bb52bf276318c25732b438639a3d0caa4041042df97087b7199a3dd52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103278 Malicious code in gleaming_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532371aa26814cc9f2296a86a3e59d0e105ac1dae92b3ff8fa2180713bddd06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-69975

Malicious code in hendra-miebogor53-ruro npm...

MAL-2025-110285 Malicious code in utomo-mie98-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689463cf18cb66fef1e9225387ca9b60235cfad969c4649c5e226ce610fcff50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...