Malicious code in mutdaufs-nabutafidayfa-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebeabcc835df6eb5acbd5964190d58d5db53a2c81fd745063f7eac442ae0b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tfla-magol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 453798a6e577457fe2f1ed99c29dc19ed08d48cd281333f4ae443d80e4a8743d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kulaiksimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff38febe64fc75312286816d55a65c266d55ef5c49a3a6f1fd1b62e213192c0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutiasfaft-burn-mirt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f09f75291dd369974f728e5bf739694d1da6f8204c6c9bc46c3e5cf5c9d436c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4272c0a09b03acc3da0c173bbe1443c73246e9f73d8f3467c8c9bd1571470a47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e151ae847337271cd687e848e34958955550db028fa5770e1ae24c28b60fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5ab704a2887617bbc85bb31af9b3ad0e8e668b6426766c4ca7b8b022e5e0ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169173 Malicious code in trevora-cir12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1642a2e37bdd243fd094d4030a67693921f612ce360defdb996095f4a29200c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158189 Malicious code in lintang-tea30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d27823eb64a9ade1269be9f4e0425dd7080ce2e421554c41ebf5878d2fe206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0479cd7ed9763457fb033fe296d147b648b6a44e53c2362e5b7569e32f3f67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ace05da76ee6137520277d1359ec38173497c04ac97a43a38e1e69b06e0c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168869 Malicious code in technical-alin-tubukianal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f6b2590ccc6b97460b4f366e1a40415771cd32354448de1cfb31cca85d8515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154745 Malicious code in dioalgo-klp-akauakui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085458f1c1a577f1bb8735855c636d07c26a8f1366a2df9d063c685eecfadf26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169473 Malicious code in uarag-mafsituhai-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5b94707f7d17ff744d6579c66bb3f5a7a5910b54ed0e21828c69323ae580a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159273 Malicious code in makani-aiba-ufyvaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78f0b03702e32081bec9511b8b67e7a0f1f92383a8db9e350621621b0f8081b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-draco-nuxtjs-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503cfd33203eb61bea2f55c0cc50a030ca1af9d5506549c886acb9edbd9776af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-algol-adonis-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3843506cf065364f776d0586ca97866bfb170acea717abb5c1f73d6f78f467f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-reveal-md-antares-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc48de705e14b0fc19c38e6070047b60ded65999d88f313efbde52229f4b8df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112856

Malicious code in helmet-mysql-auriga-elektra npm...

Malicious code in google-csv-bellatrix-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d3973375d954986667ca7aa33aa2b77e079ce52e861180f1ea202f3071fdbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...