Malicious code in analuba-inu-nilka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16f383e0427514b3422c554e7c579e6d7a88d47d6d1d60d7506a8cff4a6ff0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-mami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9b0bf6fab350eb5f06aa1862d38e79857180193e4abd22b8049b91df3e8397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95610ee7fda42efcc41d3272e28fa852c46243613932e428d7bb555ee8bb231d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faifg-avuffigb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4438b4b63ff3017045435551971e1cde6815fc730473b4101c372650c359ab65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiut-acg-avefivubufuig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1680841ac6e99f6fc95493fc8662d8377c44a130e23618433f91680a2cd0bb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051894b39d8542229a4c9d8538f70d0f93b7d5f31fcde9d9e689bdd276ae59ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-otfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa98d0822aeb8f36d712bb55b373d6cf14da8505e04b8cb6e3611f3d2010fd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

nakaki1 (1.0.0), nakali1 (1.0.0) +1 more potentially affected by unknown CVE via tea-vibas (1.1.4)

tea-vibas NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on tea-vibas and may be impacted: - nakaki1 1.0.0 - nakali1 1.0.0 - nakami1 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-180035...

EUVD-2025-134208

Malicious code in lookingan-jaja35 npm...

MAL-2025-180161 Malicious code in teate-thy-sonic-amvat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345046e51ca0a22fe06023ef22e8265762f93d098a3992d2d28fcd2cdf168b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179676 Malicious code in kisut-fafunig-amfaciufia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca210b34c411f931e5184c826539e37a33643c957ff86cbc4714c12d5a208ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179478 Malicious code in anabuyil-inan-nii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d720658257237565e94faf69cead2975a2ddaa269320a0fcf91bc78fb8222dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180344 Malicious code in teate-thy-sonic-esro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56082530cf3c91c363100710215b1d6af43b752da441c99f7a7a31fd5e1c1859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179824 Malicious code in lookingan-jaja46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1246203f90cb8589a76514f9c6a632b8f3fa4c0b606696fa8ea494ebfb6bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180256 Malicious code in teate-thy-sonic-coreg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41533f06256ebabddb6d8aec97c51d53eb4e00a90c67ee8479ae5aaa2c9d7a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179779 Malicious code in lookingan-jaja10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a0a44653b9841a0f4578ca5d2e055239e89ace8588573b58cb1f59c71d1eb7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180607 Malicious code in teate-thy-sonic-kohcaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cebfebf0b77f28733802b9b480f3f05df7c4d5763fc76f4e9c735185a1c0b516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180812 Malicious code in teate-thy-sonic-otija (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16598cf30806f32efecc1806dc3e5a5322b5c57beb2d9cf5d0dfe66635f05874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180432 Malicious code in teate-thy-sonic-gobtak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc317110fea8bbc49581ceaabbbbaf6908d6205ec19b2bfc809a69781b4a6ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analusia-akiai-ainiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8111db8e44e314a39d3c3f720138f53173b4fd7ef2c751966165d7efcffc4bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...