MAL-2025-182105 Malicious code in gocay-uga-agidufyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a9444a426b44ce29443f2bcd427532ff615d1d57d528ddd859750a2a23e8b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183337 Malicious code in libc-ug-atafuifiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2754226febfbe72f3b3f8d03a73ce426b070c7a4035ee8ba8d1b7aaaf7028202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185094 Malicious code in sonic-ks-fudvitifaafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ff297d65d751a52138277f3fb88404b45b18f25e3f10c116bc4bfef62f07e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olikua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e28cd82951311bf0b4629cba9e4d28103d778d456a78f726d490b298d753d3fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183113 Malicious code in item-ati-zpjozakuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a01e48f83d0237621895ffc23789a4c79e696832f7b557e4b5ce0aae5f40559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185005 Malicious code in sonic-koig-timea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566b4ee12862576022bd1df5032ba5864d37020187090bf5aec876465d7fe39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183525 Malicious code in loibac-ubg-tuaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc2eb1b68aad30fa87532be6e8c04c165d50feac5b23ec40ba305320e68f020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136249

Malicious code in itale-adci-gnyagibhghygdfbdyyui npm...

Malicious code in asitam-ifut-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758e831fc8d54957a107d71b57d6b783bdf404dc9e23b490504dc63550302ce4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asta-alikif-daka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f9fa2513e8f5dc7b7c516a786806b4ccf7a49d8bf782d99ab100708d8790e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dabamikumiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf938d692304b0b2292fbe0614bb75ddeb40889d2530820d94da2f42f427908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dalimiankunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4e5714554d8606d52cb87fb11402c6ff6be45b951947d72f1a17085c6bf6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzbdami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84655bdfa4fce4c7da62d1562b3724947bc57f7d107e1ef0154570ec15105f76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabtaami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a622ee0a37f48c7ae4ae3bf2fdf9d7a8eb27b226023b56907fc99db6808f1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabtauzabidami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1faa7eae8a80f53e67224f65aa28387fc2befa0526bc732713153f6794c6b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabulikabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d6f2f5ec58d3f1972b2e29651365a51c1c55077e2500fca017fd08c49c8030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-diugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7dba908e61c5498cf98a5ebb7f56ef9404d768ceb83af01e3077d940790bfaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifukilit-dakiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd8b78f283b6ddbae0504cf3e37b6b2256ec65ac8ead828664d110154a925d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dabuakaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d4addd2ad9502407b1749061c3dbdad9187f810f75a5d3c53e2ce554db6062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakaknuiaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c02efc7d2dc42ed44c1290e68c4fcc9c091cee910c6d8a13c29cc02f1e2587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...