MAL-2025-183637 Malicious code in mahnu-noy-gisostsiogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84af238b31e9b6b75358c760d2e7dbf6d39f16d30c4b339342754d183861b77f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185094 Malicious code in sonic-ks-fudvitifaafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ff297d65d751a52138277f3fb88404b45b18f25e3f10c116bc4bfef62f07e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184367 Malicious code in modiov-kihan-afmcauncx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36698a31402a6ab59a462df3e2c2ad13763fbb505b813b0f8fecc9a0da0847a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182378 Malicious code in imodiov-kufi-cocaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d857b8b6d5145d9b7a5908bac252ff27c023cbdbedd5b8e5e27ca1493616ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182162 Malicious code in gociay-uinga-uugucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c9bef97a49c5762fdaaa911484abdc87dcc1b440273a56ca8bb7bbef95122d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183463 Malicious code in lobac-ubg-abufave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3905c573cd9c9f806ca24c3adc22af0b0500934b32ec101cf678ab7fefbe64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183336 Malicious code in libc-ug-atafufiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77068e34e94237a64b817e5c84cbff2d167e2e865d515f7d41fcf615cc3d0a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182439 Malicious code in imodiov-kufni-acumnacffgteafsgredcadfacvfehxaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2691b01cb39d8ef06d3872d78086031fcf1df6d9c1f00968ad045ca8ccce2e29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184162 Malicious code in modaiv-klvu-ibaibavaafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb4a4e6c6ac942931dcdee1e261df22b81cf12ad26ed6f600a686a55469c741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182897 Malicious code in itale-adci-gnuygurgjkollujlnrti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08f6a18e817394f80cfbc9139ca2e128f2d76b50a2459765ae4e1c2b63fed50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185341 Malicious code in unise-kit-bogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c64805fe2b37966b2797bfdde96f85332ed5ccc73aaeb1589e2d993ce821852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185089 Malicious code in sonic-ks-fudja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebe8c4ac11499cbea17147eed24797ffe760edb49fb60360185ffb25d75f9b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182010 Malicious code in flights-lutug-oiad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbb6f95792bc674d1c22a91d6c6457b0287e5d78b6988facfcd98a64c00ea36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184991 Malicious code in sonic-kig-tifuacfivaacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5c4d31880314a32316fe644bddd2e6e2b4b5bc291168b5c03a29f35db1c410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181726 Malicious code in astam-ifut-dinuhsuouhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58603f6c06e8d789ddcecf1a711f1a3cdaa2d73721ef7182d116657b229bb776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184365 Malicious code in modiov-kihan-afmca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89bfed3c26b4fb2af9638426b978a8339a15b12326bddfc55684505c322da3c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184618 Malicious code in odasv-knu-bobacuvolavafin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d5b1ebe95593e9683cc2e31bb0158747f738f5b7787695f8dc8047d8cbaabc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138003

Malicious code in flights-lutg-oid npm...

EUVD-2025-136369

Malicious code in itale-adci-ggmatondngnru npm...

MAL-2025-184814 Malicious code in poliaoz-aiksdfo-alfdaassdion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f51fb2bdf548f32b43a9b2a2243c928939a44867e768a280811b73b86f2d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...