MAL-2025-185256 Malicious code in tuis-kjt-garfuafafawkvdyfimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5008f9506a84ba8196515389256f0b3037df23d0a8564104c84ede534009a80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182420 Malicious code in imodiov-kufni-acumnacffgteafgrdcaavfhaebfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c6e9192a1f7b0759bcb577daacd5a88259a6361350d2d2445cdde6f5fbccee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7059eee4e4cafa5453d01f5e7d327eba941c664644b0061ff024772946b134c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180558 Malicious code in teate-thy-sonic-jimhab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0547883a364d0554c4a4ccd7833d18cad8669f2d873ebf2b2ca870ec20971ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-tidti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e99a63bedddf395967d2014455b65fe7065a36027546efbd1311cf7de80e026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179587 Malicious code in anala-akin-niluka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c77fa5d26022830e56ddd2202e49b17e828c09de6f7ab601b621600a7a83441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miba-minas-mins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30f2afbbdc543b1a822babeb49773eb2718210fcf5c04929b40029395a6c6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisom-okalmir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e06255a2bccef5a21ca33d7c673d40956d8b4372578cbeaaf7e0083e99dca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173238 Malicious code in buis-suinana-mamovfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f397936297864215b702725af63d508c6e9ab1b42f57b0c362986d502117ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-madibvacvo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 299925943917168945a6e8bca08adc53d36811ed59f8e631de1093dfbf917f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e138137e255d636e8181d1d58f744c3fc64c00a27689e9701ca5c0ad3d98c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufja-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 787187267cce8387534bc7f62592c1953e12396f0bbdf1ae313936efa1e08f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-mabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485ae29e4e99688b9d13b3e53b39aee4b57a49730f2c5a7f200ec1222f3c3721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-saf-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df94a684d7369ef7240eedbccb1251c48578ec7f9d80a596dd69ea55094ecf93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-afifdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494261b4882dc1e9c513042f40f9fe967f06098511e473b295efb2e34ba1c851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178889 Malicious code in teadod-rsi2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19c8a0427a7b5d2bbc3d3b681ce544c815d234116d90399bff5d08beb36bdea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138395

Malicious code in polymer-avoafifa-faga npm...

MAL-2025-173727 Malicious code in butauahur-sofi-dosapih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1b8ba026d56a76e5791a5b79e9a2191d6c8916061798eb7ba7e47d90a711c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-ami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599504053a22e8e6443da4a3c5c51c7c24bf531255ec749ff10653077b8ebde5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177896 Malicious code in polymer-butyafsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed97e4950ae8c5679fb7a2c46bcda1d41c15412e97684ecb1bdf0024a8a35bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...