MAL-2025-175335 Malicious code in kapvino-sogani-odgafgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63ef9b67fb3a1499269a387c9e7b34d5e0cf412cb43b15097372051d30c97d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177151 Malicious code in nuyar-dad-rd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941f2c4a6396814d79d42a05f5a4d2e0ed3b9ba20965a103f5b8634c5b8b0ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175441 Malicious code in kapvino-sovni-farsacvamvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f1f3c55ab141607db8ce00d1cc4ecb921ed90ebe2a33b4055cd22799cf5f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177870 Malicious code in polymer-avonf-afof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ca73687406494f319aea337d2edadfe02e58d996322c6f9fff66e3724a9563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177658 Malicious code in polymer-afajif-rod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b9134eeddb6b51047ddbe915ca2d741e4c5d23ab42eac747c75aa1908c6fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175623 Malicious code in ksai-kil-kokaiali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 515244ae2725a89485ea8e47908e14b7e47985c436a4713b26f81c43037e565e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178800 Malicious code in tanura-sui-dafuni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf53cf6d4f9aeb63b3cc7271fe219b212aaa603bb38c8326cfa19bda900e12a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178724 Malicious code in sumpel-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e0ab6cbbe088003eacd39f6b9c6c1f9787a3d95023e1a9a6d449ed38108f45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-halaodi-misalania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8b1702971d7efe08736ab8c151e5912fdab5a80587e8e48c55e20d7819543d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traay-pazuap-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b65cd58c7e682d8119bfa7244065e17dc1e98e1bb411bd576d960cb77b7a30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175206 Malicious code in kapvino-socovni-fafgsjkfskfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector effb4855561635a5da3e51269e203f2e13a654d72dc50245cac1d789c43600fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144383

Malicious code in heres-matiula-umanuiada npm...

Malicious code in augis-pod9r-munio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f72f2e7087ce06336c8cbb693b5cdb750479066a8f49df1a58c7f9e54c8c9d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehkontol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a5861f07673ab68d180a7bd8a640366c646c4e1d24d11b6c05e3c9f7426647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimmo-fga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4140ad4dc3a20f0c7c46b05f6d6f8a32046db3a79490cfd8fa434691cc364a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172488 Malicious code in namei-mala-abunubuiau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20887f231554252078f8b94e142aa3ceaa1f6b08c33bcb8ee45e44dced99123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoui9r-mafodfna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5166450f59a28c40264c420bba5d07e1899a7a08020c3ac07b5e93fd136fbb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172581 Malicious code in verts-otimo-nafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5146fc91236c12af5e60b3d841ebe7ba0c604b243f712dd7d6969849326f16f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172475 Malicious code in namei-maila-aiamunubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfb38edb4e2a67e40b3ec430f46c6e71d4a45e4dfd3cdbf79a27930855e85a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimn-fagaposa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180c33f17c17b0375411bf6a61f7c25cf8a195fbaf352edd1408dc1dff071276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...