MAL-2025-173164 Malicious code in buis-manis-mioapaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac2a638312065fe6a5edcefe6b7a9b183e6cd858a4bdd20770a1f4ed746ae55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175206 Malicious code in kapvino-socovni-fafgsjkfskfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector effb4855561635a5da3e51269e203f2e13a654d72dc50245cac1d789c43600fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178612 Malicious code in sahunim-satudufui-fadabidant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbd43e4d073e6afc6001e2d4cac6000c316e3b7c5ad3d5b4c41481dd13a9e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178314 Malicious code in riya-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4088aa58e37aba819a33b0e86537e9ac673f4851dfdaa740372a403bbc4e15c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178914 Malicious code in teagod-naiman9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3fd3deaa2d95ce6183d65ddb6f427aa8c984eb96b7c230b37e735a4c216ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174400 Malicious code in goodafiun-ta-fuagif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea949d3dcf49d7b90039d757f2a61ef19763d66e42c87c7473517d84028e4b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173783 Malicious code in butry-yust-busy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f497e8d16be4093586226a88bb543805643d08bd24300333b6ceec35db5f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-masidasfdage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbb45955a7aaa6ffda55cf347060a30562333d51f122a728c2d706cf0031d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178216 Malicious code in rindaman-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a6b6ded17a6d55b8583117493cbee02741b5653ef1b8cfd7b1c8c1afaf9a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144383

Malicious code in heres-matiula-umanuiada npm...

Malicious code in verts-otimmo-ffigggafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8ec906f4b5cfe135af83d35a4447f808c8f957982c9226e6fb4019ed5adc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172434 Malicious code in heres-matiula-unuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b430cba67c480d2feb42bbd483d48a62efe5bf1a3741aa3f861fc1c7897b941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172211 Malicious code in augis-pod9r-muail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42175bfdd83e898b1f3c3a0d56d16d16989239416620ccd2e4df759968270ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibrahimnabeel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad47882585945fbb6a01e1eb3fc513fa53b1240c7349a5fcc78f7decd554ba4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miftaikyy/roya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08094f72381f0882e2c1cef39d0844cd4e6832e84df61c7d9b62f96934f81392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e151ae847337271cd687e848e34958955550db028fa5770e1ae24c28b60fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demaf-byturaa-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989123ce63020863eab15170470b7b4f543e3fd6b3b64d1bc81b43cbd6ba7de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146487

Malicious code in verify-aya-amili npm...

Malicious code in hariyono-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0479cd7ed9763457fb033fe296d147b648b6a44e53c2362e5b7569e32f3f67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f43948e5069303287184cbe032338dacef2c634bfae4faf5ee24a326db6c531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...