MAL-2025-173668 Malicious code in butanaih-asfi-diaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83dd04a22634d7eb9ea20172d8c9b813834251db957fb5c530cdca2e3048949f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyg-gibafitfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5303ae700ea6b5028cb35df4378112111744ced9c984c3a12fa2d08249fc16f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08e2e120c2256be5ed95dac048d6b94a054f0754d6b9bc5d34a6081701811271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sodi-vanunds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1992cb9458502e52f97547b2ed715ae9b6b7074873c478533944fb5094f6990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-142349

Malicious code in diva-banubot-imubgr npm...

Malicious code in polymer-avoafifa-abohoadfadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989fb88e54bf845b08f5f6155e9889c55c8cdc5848aafc32a95969f78ac181b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141612

Malicious code in hitachi-poke33 npm...

Malicious code in buta-faina-aagaiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebbce251e27025d80e77a0381a18716c3d51ff18fcded4770c22e26717eff4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-sadamuda-mimanuad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb519bd0cd90f41c379cb5fd90b8bbf0c8dbdabcf91d552ba27a356d2c81cd87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9738bd2ff99dc8390b5a32b3db1f70c640cd46f95c62ac6d9f64e9baf3cb4db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonadff-abdma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93bf11b89357070037017dd8e27b6fe6cb2d82c1f9537464746d0c1f7354e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsbers-ytug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d397b9bd697da72fc69ddbd3de6fcdec4785306f9060cdddc7d0a9e459d207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178205 Malicious code in rindaman-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57519de18ebde216bd12ef5ed4aaf84b0fb1f050ae2138a844796c079f047ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178068 Malicious code in polymer-ids-radaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b6f1114754248aac2b78282269500c2132fc98895c5bef352570059419ef3f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177726 Malicious code in polymer-agag-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6933c21028951584f9f1a1f0ebd8ff79d3b59922f98c7aafa5c2175d99697ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176008 Malicious code in miands-nutayuri-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad97d82a9ca6c0aa45b45756fabd13f3509ca41e5a29f16290e165f643df77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178481 Malicious code in sahu-sautug-infaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4addc90aeb2174e0c5257896988f7d3db00af9382803fcdd68864b1f5558cc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177214 Malicious code in poglymer-ogahh-fiagfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565a1e5ced03fa9a56a64dd4c61c0f7c8aefc0c7e7bd1b8aaaf44c97ff0ffc1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178922 Malicious code in teagod-nalika5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a1c7559abee32e61d1268e51ad5b4a57efc2458198ba0f2544d6ce30ad1e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175029 Malicious code in joee-bau-imu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff293e25cf9528267a75da4d9138ce2a9751e05a3f7a5a5ac39dd130cacec67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...