MAL-2025-177862 Malicious code in polymer-avonadff-abdma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93bf11b89357070037017dd8e27b6fe6cb2d82c1f9537464746d0c1f7354e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176395 Malicious code in nokire-kushiya6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c80ede26acaf8b4cb9d6e68bbd5a7a3c134ef764206cbe9fa4d35c594e32fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177977 Malicious code in polymer-gibfaga-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbc6e18c1951f5edacc13e6ec9f1663f8c7051a3a4950122a870f43019ee2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175013 Malicious code in irfan-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33df34b2154ddeeada8aae922f3cb63ca0e40d0085880972b7a704cf66098ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172857 Malicious code in anak-jalanan-mdn47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a297e0df8279fc09bebaee521bfec9ec4cc28aa98eb93e9c8e827c8a9158e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178955 Malicious code in teagod-rs9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47372bce5ce26118705676749e75a346b4540701654a4251319a0aafe4ef1ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177595 Malicious code in polymer-af-rod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27c822c670493ea25f440e6eaf47abd8f51bc885dbb196b2e56a190f39e532b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176631 Malicious code in nuilva-avmim-rvosv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e6de3b0e2aa69bdeb11da09e6a6b95ab64c7527bd99aeda5f24242a851a795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176243 Malicious code in musan-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56118d9735bd9ede953681e42063a7830547ab78976e460e98660b7e84224f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174093 Malicious code in divata-tugai-iumifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263ec37d3a489e5bae423b335b05f530d49ec6fc13e67d6418177133759d6fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174226 Malicious code in goditu-tuamva-dibud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3dd4d18f787ac64367fe6a36d936efd11ac679e074dadb1a4d39584adb8897d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173224 Malicious code in buis-masi-mafsfmasdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97cfd0e78bf5934e687a93e171ea61361a65e8c4cb34a35b6af22d4542b5455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174607 Malicious code in haruni-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42830369e521d7f0231b3d6fc601af2d8956aee1e99ecea64a3100ff0d479bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176341 Malicious code in nokire-kushina20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c5b751925aadd67ac64b31d63ad1be49f2bb33dfcf0f49ac514df151d9b808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179042 Malicious code in thambi-busrt-brts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a79903de37c2f528f80bb8828beedf70f6c2e3c52a13534d71e8fa3f62db1aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176515 Malicious code in nokire-tanjiro29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80845458c29519f2e5c34b210c97e2e6d4feb95e05b882e0d9faca1dd44ac6fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfafi-daujhsiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9dddee2e014c6d12bcbdf3e4167393f4ae1b2501bfef24202f7a698fd1b6e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136489

Malicious code in sahunim-satudfui-fadafa npm...

Malicious code in sahu-sautuga-infarudui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7e3668b860c6a00933c325e7cf283c1b0a5ff929b983e0e23ceac9664ed3c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-mas-nuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b55cd059a258dc9838d8ca6ed050c187e6618067596fd5a57a03c4de1d09d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...