MAL-2025-174595 Malicious code in haruni-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3715552786c70bec7d7d30ef6b259d84c713a12bfaacf6ce33e022dfa6c32bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179392 Malicious code in zaskia-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88086ccdaccc1bfd0c363c7a487bbaeb16438174ce5c294e475caf062fe2b28b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137016

Malicious code in riya-48 npm...

EUVD-2025-142349

Malicious code in diva-banubot-imubgr npm...

Malicious code in buta-faina-aagaiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebbce251e27025d80e77a0381a18716c3d51ff18fcded4770c22e26717eff4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terui-umur1-miti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3cd38e05a6bce03961384b9cdff9a9684611ddac2c6c43d5f24ddb291bc04f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-gbfffsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb9b8ec2d04bb091a8be44f5688afbb5343536e121987a1a3ddf200d4c732f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08e2e120c2256be5ed95dac048d6b94a054f0754d6b9bc5d34a6081701811271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoafifa-abohoadfadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989fb88e54bf845b08f5f6155e9889c55c8cdc5848aafc32a95969f78ac181b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sodi-vanunds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1992cb9458502e52f97547b2ed715ae9b6b7074873c478533944fb5094f6990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179193 Malicious code in traay-pazap-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee1b3ab8390352c288a29cf58c99fecb3c6ddb4b45901fb87b33c679e7fff9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177726 Malicious code in polymer-agag-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6933c21028951584f9f1a1f0ebd8ff79d3b59922f98c7aafa5c2175d99697ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176853 Malicious code in nuilva-vmiam-avs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bdf9202fa04b6d7dd3fb190587bc4670a383a8db4e2f998f78c5e04783836a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177214 Malicious code in poglymer-ogahh-fiagfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565a1e5ced03fa9a56a64dd4c61c0f7c8aefc0c7e7bd1b8aaaf44c97ff0ffc1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175029 Malicious code in joee-bau-imu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff293e25cf9528267a75da4d9138ce2a9751e05a3f7a5a5ac39dd130cacec67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178481 Malicious code in sahu-sautug-infaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4addc90aeb2174e0c5257896988f7d3db00af9382803fcdd68864b1f5558cc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178205 Malicious code in rindaman-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57519de18ebde216bd12ef5ed4aaf84b0fb1f050ae2138a844796c079f047ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175637 Malicious code in ksai-kiloa-koaaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cb6ef72d8fd41ef4b3e4c0b72ab53655d86393856fb898fa5b3d89446dac4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb79ad4ba9b511fbec559042d8d815d4a8da98ce876208b7275bffb4c0112ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadis-mabadid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 648c24bcde46885127634200e0a541e7f831cd2380d3bd6f53ab11cd8a62c19d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...