MAL-2025-175773 Malicious code in kupaio-ukuola-joiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18796cf15f22d86c6029281cd64d0445b8eeb9e383945fe94998794126453a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175882 Malicious code in mahiu-sautg-iaauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 448cf7d68bbe773951907beeee1003a895e185f0e5a369b4ff6c84f1d8d423e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174848 Malicious code in hunimi-satihu-an (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75890a4098a7c181b500e57de66aaec7e1c08110c2b0db8b9cc3836cec87ccbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177086 Malicious code in nuyar-adarafdia-bya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a480f35ac776176c6911e8f4ca03e73d1e30193d6492ae35974058dfa00677d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172812 Malicious code in amsahu-sautg-infar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9db9eeb47d8893f219334b6a0c01fb620d39926e8df118d47d4ae6e9b1277d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179086 Malicious code in thambi-retf-rsest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1499ab999d121e06c290e83d86d4741493100f39d47ae616deb479d9dcc3d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174048 Malicious code in divata-tug-iviobbga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70b6f74a96dbd1c336916ad001ff13ae29e515feac0cb28d391ed8ff5ed97d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfi-daurufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adee7ff28421b56a361ab39559ae98ee972c2b899baf9a6fde47cd434c62c97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-toi-milo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccbc6875111697d59681fe31c7d8ca2ae4a3534c7b0ec7694bcd55ab9e00b07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-bunamab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3dd08418eeaad14cae815becb115c3e0973f8799da2d8271da13fd83bd459e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd39b8131563378cd3a16bc939cb21ba20b6cd6423efe88e629fdc5151f51a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-fdid-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dbcd40ffabc5edf72fed60845b63f7965dc54868803d8ff394e31eaef83aef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipajapnoa-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faede7e7ad450b34b3018a867920beb780674c165229dc889cba3348c149a461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-massage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbcfacb325d25d05d8c6f3c77d4a7d801e7db9b993bbf8841d407d4f807eb3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140170

Malicious code in miftah-mipta19 npm...

Malicious code in butanah-fipmofha-hfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e227b2f360486795659b1512edb033f5bfe7ab248e096ba4e4f3d1aef99fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samnu-miavva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3755be58145b8ce4201a3e34e6dbd6210e466aa122ca14fcab314c63c8ea47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satihu-anfagiufga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc6aa940dff785c5f88cba63fd53dd43ec8623602536a732f4db53d9dba7bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimiabai-satib-nabab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d51f1c2548f30ded4d7909d7c14e20561dc221cf2eab7f879c32e4cceb364e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adar-bidu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec48b299fc78fe965ed14b71095fa3a992fa36e671a954e4594f39876a06e34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...