MAL-2025-179724 Malicious code in kisut-fig-dn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1decb83133518a36c3afa019cff615daec82cde0b9b58d6275e2abea9ebbd4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180414 Malicious code in teate-thy-sonic-geglo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5760d76f5187fa0903d15c230065b7243585f82721d612d008f77cf34c10df7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180089 Malicious code in teate-thy-py-patku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b5d20dd6558474abeadeecc88d7d0ea2617e11dc3deac3c86cd543d4237a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181096 Malicious code in teate-thy-sonic-witcir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25d3ecb227322b3d3cc2eceec055d0799e9f2c399d17cd0d95923a637b33551e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180834 Malicious code in teate-thy-sonic-pebede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7a6052b62441a7a0601e6d63ccbb6c4f3dcc32d449ddad1fd22de63b5a1aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180343 Malicious code in teate-thy-sonic-esouk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089fdc65084715b9f530a1eb95ba1c832cb23d2cecd082111be5ee030457b2d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180331 Malicious code in teate-thy-sonic-emfan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b71dcbbc8acf46352f2910b4e7832cc4776ff2b908fe39bbc078301f051b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180715 Malicious code in teate-thy-sonic-muglo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71095579b5a8d72a9f75828ee4374ae392c475c75e1bd98e6b64131bafd7e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hauli-mul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957d63d9d916beb40c91a3d9c419f1e80cb82ab563a4d520d55f905a6a276225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903345be3f8e1b00a46d0ded9e8c22eeed3e31c2ee55ad0296be126f566fb06c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-masidasfdage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbb45955a7aaa6ffda55cf347060a30562333d51f122a728c2d706cf0031d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a05b39bb4a2c4dbe9b4650f9f0c8c0fafe9e842f3b124928f61fff9b6b52e48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874734288fd33307686d92c862dbf2db92bf6c3b2750924c38811e5b8c87bd19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143633

Malicious code in aaku-lia-tea npm...

Malicious code in kapvino-soffgdi-ugaafaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c60379a9414edf62594adf3c7888071e04521a14f249f4d358a4076932f2fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kullaa-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb55ccf7bf669ba76fddd49d13911312f0ddeeef28ef87d50ec1479b5014336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sugoodaini-ngasa-abai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e039e295fa2cc30361b6897e8a5b202e467b0acfe121ed48b5c2982d20d9fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137579

Malicious code in polymer-ibhgssbo-sgahsdi npm...

Malicious code in indah-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b79b9643d226897aef4ce09471ccb6bb39070ae8e329284a93aca48f33b4a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mubafi-sunai-caai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8967ea3c427e48ddd0b785fb697841f0d922c88a779a9e5c7e0db316dc22e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...