Malicious code in @mipta1/mids (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31892a9c1852ecd300569137c8fc96ece805772cfb80b41a165a2d17074f1d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410af9a6f3a201bb164af56317fa75f0d947f866233a97bc3da58f2436adf99a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiuga-uyok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5446b09cea4b2437174c5005f4bb6929c056f1fc618153224be67618b811d761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6be57b1fe9eff229d23f0716fd00dca397bca4d38e39b4911663eca0b7ee810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f01c0c68f7947d2df3de6b4deae67c3b64a7724d6d03cb1f051df3205df3f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d867f9b185d6081d16c49eac730df8c94e0f87c7f7b21327666af737f7571160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad48745449c42b148f5c962f319e4b4b70928879fa1a5c594a7372aa2d9586c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugaat-dau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d783a28b213c4f57c97274f5b399e82ce5d9175babe5d4da4f5842b7da5081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-taic-busuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90667c6315c358a93c5dbab248f55c5318c97f3e4d07e0aa25d64853333b98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aya-amilsukxai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe414877ccacabb8ea83b7bf098cd7ae8ec8a6fe9f4fbf0fa478df9f217d7ecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018d15fbf9a482a2e882124e01c25af3e57fbe5dce6995b5dfa0c2a919893e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87fd740aa0de337f4c1ad16ca997ce2ea56fad4b137219af070b681e55d211d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisufafmyau-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9d5073989e6aeae7f0c109b3c863a531a4047e7f042832d920ad0464ca4386 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-148722

Malicious code in tealove-aruma34 npm...

Malicious code in layla-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff110dd4db33e13abe2b171700aa6ab1c6590f1541a1150debff1fe38913a664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagis-figanayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4296757242288732b9b904d2e0ab8ca1cb6208b3164548cca1235cbce8b85838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154056 Malicious code in cinta-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fa2d7c1c0f9d4f6c49abd834316eca9ac82ecc0bf97841524b2febc9798c3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159286 Malicious code in man-nonatai-gag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8c90ce0aec5046e76a53af23f6655aa528198a375b498c61dd10f82612b346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157430 Malicious code in kapai-afammnaaa-ada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1398ab1e2130ffb120f2067556bac20522bd85abc1b2fa34754bf9b849a255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159547 Malicious code in manaf-yuaki-manusua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff16c986e8331211f16f587462c753caedb15998aa38b48b1ada13da0c27016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...