EUVD-2025-137954

Malicious code in astam-ifst-daiikiula npm...

EUVD-2025-136834

Malicious code in imugay-avig-ijf npm...

MAL-2025-182860 Malicious code in itale-adci-ggpantekkoyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7505ac39af069bbb5b249dec9f5c1467fea28b5c9a69f58e18238f9a024b7412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182921 Malicious code in itale-adci-gygyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16138e3fb04ccd0e146893046d97b791e0aceab121e1834fb8c74c9fb85a2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184552 Malicious code in mugiy-ajoig-daicutafaajjk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c1668121259a5f25ad1dbb456f0786033c8ccfb93c316b4e53f2dd7b1ba629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183681 Malicious code in manu-oi-gisiasvugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2dd7291241425b1a962c16841c92cd702e35fd7eb3ee1736f0efc00d4daaae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181935 Malicious code in flights-ilutg-idu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae4911b2d4888f37d37c975fc6829b1b1403eec00db6113d051a995ce48abd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184075 Malicious code in mitouko-ontcami-lamokinia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ed1c8927e31ef3150a43cb5994dccf8112b823ce9b5506f532a13f206d394e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184345 Malicious code in modiov-kifuni-ufbaceuiacfovadfhjodmux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1bf1c392b7d6f1b99604f37791fccdb16096401e4dee04a731928a478bbf8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182552 Malicious code in imuay-aig-iyuag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59aecaadd8672e249afcfdbcb499ef3212370d38515688e18bcb2de653bdc293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184445 Malicious code in modiov-kin-afbaufcdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 761657e617e9706c970df5a5ec9e69a0eb56c083af3a7c6246fe0cf7e14524e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183201 Malicious code in kisut-dfg-difzcfccb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c8b50de7c333472ecac1c7b2acf53098cc8011c10b4fdeb83d62abdfaf6bb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183379 Malicious code in lobac-ub-badadufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce8d31e8f22de289c7a58c6a4ba00920b969ac41e0df114cd37f9e43034d27a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183107 Malicious code in item-ati-labiza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca3078fbc91df83b92537c5c90fab082594d842717b258544c052d2f7e71738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183386 Malicious code in lobac-ub-jf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ace3cc772604f83dbbf111fb45dceaa972811b7830195765e021db8cb1aaec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181986 Malicious code in flights-lutg-oduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa453523c97ca0615625a665c072db851f699f0ba3c23e3024b9fce85f1bfa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182456 Malicious code in imodiov-kufni-coca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a56ccbdf8fa4517c3e9db59bbc788c1f919ddf098c5063fad6e34d5ae9462f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185016 Malicious code in sonic-koig-tmoerocnca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b51820c86ec2cf2da5139bd92205de20713ab22c1afdb51cab4617c043d802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182940 Malicious code in itale-adci-yafyudbruwegfheryg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edc9add754e668a9a3ab62d140b1f2eb02913899c453edeb895d70264b02b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184651 Malicious code in odasv-kuu-bofauffsni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7481924f07c1100b891f90804b16217eeeeb2c29dc2224700010672a31f2991c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...