MAL-2025-183667 Malicious code in manu-oi-gi1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd4b16abb1671cd2cfffa342fd1cf294e4b8348fef019910cb321adddc52aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182526 Malicious code in imuay-agg-iguqakuaduidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76dfac1a0d9d07013ff2a6308e13508bfb7920fc23c7f5702499968162bc5aac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183858 Malicious code in masv-ilisiamo-civuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067637d6fe032b34ec3d509d726c48f179c94dd56febde03344266c93e3d09ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183915 Malicious code in mitali-dan-ujokui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff51f7960fa4264b5ea644beb41d4e8884ad25329bd72cdaa1c1bb436ea7e93b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185097 Malicious code in sonic-kuig-tav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec57f0a03f529777fa6a6bce7577e812f2dbedb645fc2bcda781aae92a56ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183177 Malicious code in kidt-aog-uvufaifaafiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ceb84cf02bf439536deb1e73e015951270ab0e9ec944b13192a938995d693e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184891 Malicious code in sonic-jos-aafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf93ad103a765f619a5d787d008a6c1d3c171a33b553a2078e8f72439f43662b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183902 Malicious code in masv-ilo-cvaginnavuovhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb85b02bb73199352de8ab5b07db65bed57946a4880b9a595fece8161937fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184759 Malicious code in one-kiat-bda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff330537a71dc60e3e629ba7b472c389a49709f85e90c37403fa6315224f0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182584 Malicious code in imugay-avg-ijimaumfagaaugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c70e33bb7e9a5383b3efee7b5bba811f3108f32f2b18d3fca8270cf71ed11427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184344 Malicious code in modiov-kifni-ufuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf1bd8d37121ff0f0380675e8fce502df260236f237345d5f2a17852f99a8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182937 Malicious code in itale-adci-yafizganteng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8990ebb8fc5c2b8b12ee94f6ae2af7b5a2d249597caf494d6ccb7b766049f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183495 Malicious code in lobac-uibg-abua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf55bf884f01811a4a967e477fb7ad98409141e9a3a5a46d7dbc5539398ce77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185273 Malicious code in tunis-kit-gahufaduuvufadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5fb5b09142f885c187bae1379934319bb6d854d593af626f4fd97dd738b7f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182790 Malicious code in indexa-fotio-agv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820889308a0073180214153a42347dc1d5f6e9b0d839fc8102ea5ec495cec676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184850 Malicious code in poliaoz-ali-avuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9840d8a1fcd364e2090a3d6dc06a36da790ebfc11b89cc02b3b1e72ec38f0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136334

Malicious code in itale-adci-ggpeyu npm...

EUVD-2025-138041

Malicious code in flights-lutag-idosabhao npm...

MAL-2025-184794 Malicious code in poliaoz-aiko-avuhuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71a11bd93f13433477226e847092a7a720e6f4fd1d20f8143f8826e2f9cfcf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182267 Malicious code in hitale-irher-aeswaeae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace35c5fd9115a193c8197955f96890ec18693de8637424ec920179381910198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...