MAL-2025-180961 Malicious code in teate-thy-sonic-tewsor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d5a0181564259139bea2ebd8acd73f20e564ab921f81ff0e8654ad9963c4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179616 Malicious code in igsboloa-minisspe-amiialo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ecef925919df8bc37f8fbacbeabe3db82fd866d7a83773ca7104bcc19d05275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afriiiiiii-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf65810d017ba413913c2cc1a006c144f451d9a179271fcc6264d83c75773fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6467432729941e6eaca9157f04812bf3ae5f2501e370c27a52f1c942bc4953a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fioana-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc18883308f9db013a4f089f25a7dbe6ae7cfb49f2b41c0c33857da5abe718f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173345 Malicious code in buta-faina-aigagna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1153f848eac15890d8e96e8fd1ce2694fed5eb8d60dc4984cf77a7df6deda7db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173591 Malicious code in butanah-fipopha-hafufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295a91161cb8a11c7452c3649a3c576a28043166056086bf68486aa037aaf302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172058 Malicious code in apasih-led-pokia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f09b61a597217a5c8761bb130b3706a9483805a3bef8776d2976e3302d98c3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144597

Malicious code in augis-pod9r-muapila npm...

Malicious code in evieharrison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26451bd47e2a94ae162fb9c9493ed833958209bd516b61f207815da78f072278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fcab47d573bb4978360bc559c7eea0fc7b2a48b480ae13343b4bcaf27e52fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150900 Malicious code in @miptaa02/rassasdzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1987150a291682ae767d99cd08fbb98adf49e5b0bfc408e8093cd99be9e68682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158612 Malicious code in lookingan-namakiki96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26e7d47409b62247d78f793f648d3ee82fe605505106c197be0441d3485d712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168934 Malicious code in tehaah-codfd-mut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc73805735fb6d8aed233b3cdf95697a663040559788093c4564c6d3127131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150915 Malicious code in @miptaa02/reyua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35718d0b3da1196ab42857ea0935e4a38b96e7ebbdd453a21bd2be6f7421a9ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nutay-ko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256df9b9c7da58e8b2c1f9a9cae09f2f176b88c7c837514d8cba2410abc2584a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safifda-munaria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a405c70340035cab0f1474a1761c3ae4eb55f91c57008d65f2bb4fea2779ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155895 Malicious code in ican-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4024c214a4ff6174ec326b9e703a89672105c0388941c6ae52c46bc4987c09b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168191 Malicious code in tealove-coki34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa9d039df00a6d57387709dfcdcd3aafae20a77066b280b69962cb2bcd4def5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170173 Malicious code in uyafaru-tauimat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a54da88919ea5c3cecddc6d600ff9851d0bc84b71676c47fc55be6192e7de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...