MAL-2025-179937 Malicious code in lookingan-nanakila120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e4f19be8bdef8d85135022dfbb8d785e27d9471f3cd89d51f873e9be23f96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179420 Malicious code in @mipta19/defffaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb931666734debe1ef35cd52b947e146005489ad6f74b7263bb805ee8879c239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181152 Malicious code in teate-thy-sonic-zulo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c81fdae119b714a730479a00d43cc94ef7aa0c466d0cb65cf5e3cb2842d6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-fikus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91548a849b42884c065ca8bbcba7f62d18dae0795853ddfcde45e8d6bd1b09ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-toove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f287efea9e4d195bb7761bc0865dddc285327efac7f82144dca07331a2174b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-pazune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555ae62ff2c320862125ce090cc4d646a736703a54d4527a3c0bab5484abb380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-133370

Malicious code in teate-thy-sonic-daefu npm...

EUVD-2025-132815

Malicious code in teate-thy-sonic-juse npm...

Malicious code in lookingan-jaja66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95610ee7fda42efcc41d3272e28fa852c46243613932e428d7bb555ee8bb231d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-133418

Malicious code in teate-thy-sonic-cipfu npm...

Malicious code in teate-thy-py-mami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9b0bf6fab350eb5f06aa1862d38e79857180193e4abd22b8049b91df3e8397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-134208

Malicious code in lookingan-jaja35 npm...

Malicious code in teate-thy-sonic-lethi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3243eea45a65ef3a7a387fe07ec0cb321210145320ee31856e8ccb041577880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-cujmov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1287c0bc4b37df04a2a6d1b45d45dd50d4299c70a0808420be13c4303a8b5e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-pobob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94ba37ee5a40c58fc4a0d0b800fb558f5e303576690c868a4b11dae1c135df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faifg-avuffigb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4438b4b63ff3017045435551971e1cde6815fc730473b4101c372650c359ab65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiut-acg-avefivubufuig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1680841ac6e99f6fc95493fc8662d8377c44a130e23618433f91680a2cd0bb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papoa-0pipaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9496deded79330762af888489f9b6951240b841947d9c85ae4c95341bbc8ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-afuti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d47bf7314b498fcb9ea63f29c2c084c7467b0489cbd2f34720b70acc308ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-fg-dufadyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b552fe26884e683fe475dd66758aef44f19eb0de562bc83a9dbf94e2dd9a33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...