MAL-2025-179352 Malicious code in unimna-satiagobifagof-naiogis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50ac5748d1673751e31f9ce7c17bc8153877a816cded6555ee67a2a95f44485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178914 Malicious code in teagod-naiman9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3fd3deaa2d95ce6183d65ddb6f427aa8c984eb96b7c230b37e735a4c216ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d3667af89882d5cddb35ec8ca2aa4856afc116798e0b436c093dc3bba57dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fvpavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b30e6a54554ef361fb0b37454728ab259657f1f22887519d45cbbf866bab4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboah-asi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba700ce33a681c45084ca34a82408d2e67783510d72fd0bc57533e049a9ef1fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiagaiha-afafafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a86fe4dabdaaa8f16397b80c575294e21c824d648131f4e8bb219469055375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178086 Malicious code in polymer-rtte-tesas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19558df7205511ca7745cb60dc612a66b787142fc114a83dfda55992e438e8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175592 Malicious code in ksai-kaiso-ola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab2efee687b5334debc51f08e434fa82615b72fec135d1f6f450d53db3c5cc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139395

Malicious code in nuilva-vmiam-rafoasiabsua npm...

Malicious code in kupaio-uloka-jakali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604982791f9ec760a710025858db916eca537f1734c956442f5ebeda7d0c87f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176157 Malicious code in miusafasdan-fafafuds-afnaearaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3079ded3a00494ecdbae1813b35c393f0e1e0cf323b8bda21b420640968e40cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178311 Malicious code in riya-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608e40c8e786100973cee06caa213f036afec4a001f62e8ba66260cce4acee4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173142 Malicious code in budi-sety-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca0c2a816bab602584b1fc42e3ff486cf8e378393ed4a88d645f8f1fa4f612e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178034 Malicious code in polymer-ibhghhssabo-sgahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5fc7ba39df629d856c61192ca7c1d26c102a458212f454e155ce5ea23e51e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-giubaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d468ad6e83267abff6b01f87166fe8b1b64ed0825a2b166f7dda6d79cc5bb828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutila-jokilouana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501dd078fa9257663b83652bc8c2c44dfc688ceab89623c70492d09379e286da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42aaaf4d009dd3e8dca0e837ddc3de626c4cd4dfe7c295ea1896da9fb413605a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-minuday-nartipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae2d90a9ec029788e14ca434084304078f74ae5fe993ef6a1d29367bff06b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manuat-ma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31eded59ea6b6bd82960c1d29d663ccdd320e60d4379361bca391cd7cb0b3d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akeeee-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee69335802c1eafc050336ad53a5165f6519ce80537b20d4c541206e8a35935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...