MAL-2025-177803 Malicious code in polymer-avfifa-fasabaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f484738e7d1f6d5658fd62d1e98f3692cc5384c5dd394d0861d818edcc1eede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173358 Malicious code in buta-fana-sadofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074bb0fe743414d08d7d9e6605a846e576c930bd565f47ee356d21e71c5422ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178806 Malicious code in tanura-sui-dufaafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d578cfd5d7a24b92407090933d339fb3227816e7d25adb9899f814ea29a7594e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadsg-vfsfgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3919c8e29ba9bf882553d2e0cb7269f827308da1ac250be1ace3123576a8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kil-jakai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d463812c25fed8f96487cc91d6d058989f8b9a6bfe2c533363ff8c688884343c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140198

Malicious code in miftah-miftah2 npm...

MAL-2025-177851 Malicious code in polymer-avof-agiafadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2584dbf6d0af45003dc904a8f3e04f9e568de4a010f5c9713630d3d042049a54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174241 Malicious code in goditu-tufabm-utubat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d62886da0c1b6d7aa439f045d6f5d35529b0bb48e5e8019a86146b8755cfdfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174911 Malicious code in indah-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcf6235681ce1a007f5f85aa4f9df97556a3b7e78dd030fc828d55bb8de5c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175053 Malicious code in kaka-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39fac519d0ebc6aee09e7b729e3e81fce998bea87ee00c8121d7f57afaafcc36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178258 Malicious code in rintono-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17db2c53af2049d4ee70883dd8f778d8f97996fa18f912d9d2673cf22c4ed960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176666 Malicious code in nuilva-bavaim-madavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72d36a2b7e5a7e6007c3f9160b3c300b53e11c2dbd76122f270646d2765675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177913 Malicious code in polymer-datdfadsid-doraem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4fe1a2073db57f8d3fa910e952f34af3479102bac0fcec20f3f6824a0e53f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175835 Malicious code in lia-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a561a243a216d0858eb27e7955fa617ade642d6f2784cd569dfe89ee3c3cfcc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173641 Malicious code in butanaih-asfafi-dauaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8ce815577b2b8b6b2b2e8749410ed4a618fac5d8399d2bd5634a282b02b456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178526 Malicious code in sahufar-satiaf-favurafan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 332f5337f87c92e5dd9db0a1a2731229c9958616050803ffeb7e8cea68c479f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178660 Malicious code in sgoodain-sanu-nubagia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c698ba8d6149b458fb44ad88bcd85874be6c919a082fb8756a3f9cf9b3874ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173972 Malicious code in diva-tugafai-im (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d12f1c31f553b644fc690f708e213d2daa35dc422bddb55980e8a3836646fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177104 Malicious code in nuyar-amair-tabg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 203fa3df2200f69a962dea028f08c7a744109eeb9fec4121439d96dbedbce748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172763 Malicious code in alvino-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95061da97d86f44d6bf40d6a4096a92bd6a707e2d1c14746cac48e9df1f5ee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...