Malicious code in cewe20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac56a9f36f3f95ba774129c441af79348a900781eac85d20f680cb3ad8e58b37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57a3ee29a9cbb10eed312d786c35032608726f9789e9bbc1bc4e728482f5943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tea_guntry99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d6e491710d16f4f04edc61ffb1d3c214ef66787e862b981f9d9dd32a55964c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181549 Malicious code in roti40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536d8f672845098f77245e538d13013816974f1bda27d24177e3b797b3d2f653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181230 Malicious code in @akunsansan0/biru42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01b2f8d6dc042cfcb01fc2b7797a0856b63a0384b61919884e5d5377e6b8d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181428 Malicious code in baso69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978a579f8e8be9ad8a7dca6af6d36869b2caa127ffa3b39fe0efc8e3b8f6f613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181503 Malicious code in gun9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf7390d614ae3abed79bb62e34e694023ab8cd3c4ff71f6cd442b5018011610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-bojfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051acafc8deb19cba9ef3589a74de1d3be39e17b95bcf24560160ab1d4e1a20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papoa-0pipaimaoaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11fcbc06a297f1375f74863ab3f70b1fe4343dcee1f0f641e6b03fc26b88023b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papoa-0ia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8319d92ff3d88ad64ff08abffcd46df7533ed83331ff43db42e7dbf5e29103c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-fafunig-amfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5295e23d3e705ae40d28decf746b543534eb203b88d2f28f3dd3d45de0348a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ucuwaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e22526584efeb8a7cbf9ea2c1978ceb89a493f9ea66fcbaa0d254302fcea71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-dilfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d16d276f3c25ac3feb79dd4cbc0999cb16ba035d9ca0dc2d211cfa952388f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-irkem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d15113973355cf6ef4585c7bc49c57519ecb58e4d3e85d5280a55ce4a34c480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-fig-dikanamufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddaa2a890d35e29260bfe534932f8b860140717585adf1b6acd57aa345978905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-134089

Malicious code in lookingan-jaja95 npm...

Malicious code in teate-thy-sonic-irabik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f78c9b28880cc882bc9920e44709df64d9f9ccc3ba2676e516e04a7888e8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-itcu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96763493006ff206ebf0aa1d23cf1fae4d705645e090fe80f426e276f9179127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-zacam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d791cfce26f0826292210a4f58c51526758b7d9760d1a133cc6de52766048acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ovnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d095e70616a281e0646f869a713629d592d926edb9c4cfbf60ae83f45ab6fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...