MAL-2025-171165 Malicious code in enzosilva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a5c0d72bbaf47ce40608bedf81efb08e20156ea0ee9baaea8da5c5067c499e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in djamelcroissant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0beca172548aea618292fe4f6eed83725a720a3157cb83c743fca272843898f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miaedwards (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae01b47121a58a6bd7042b81ff7aee6b3b7db4f74e1bc92916d71352fa75b669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zulfiqararif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33455abde2636a7057361232ad3883676aa47706b8dfcbef9c84e876c648cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charliejohnson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 340a3cf39fddbba0d215836b8ecb09fc6fb039d41bd7026e26da745a09124a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kashifahmed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a7250462c6005447536a2ab8ce7bbe3666d032741cb1baa3156b8e9073e065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171032 Malicious code in charusharma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687a4317eaca8c197b4f6d872d34dae2006972eb34a7e6760749e3ff7cf9a721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewikartika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ddb13d0f64919ca0702547898ad4fe7c4c7c82bb6f8b654b7bf810df2a6f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in averyjohnson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5e212a936048ef7904bbb0cf9b41441574978fc3aebddedd70757c9fb7e1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jackharris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe68144a638d59072f68e8a2c1d53d1ffcf12c21a0b5556849c790d099560202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aqeelashraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031754c383f8ae3ebb9dcefb4466b3ab9fb26f2965e634a6a6c4619104a9f72e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ab058f953a0762fe0d3c8d57867d9fd889ebc74eb36587a52023f773410354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee4099f7a34f9a05f6456161d9a55567c2e671332c5ea48818c58e01d85d8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-149714

Malicious code in teagood-manaki33 npm...

Malicious code in nokire-kore45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dbdcb24cd6a9cca1445c4a1c63bd0cb7cceb9f0c0a5318d7694faa277360a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tayic-iamsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c92b9108c497e02e1db314b800b4f4800aa17da9fda97a7014eaa282a2fd6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50ec8d85d61a1a65ef959b73aa85042eee32b6934fb45ea05ef4655918ce85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-a1rea-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cf06cbe475c11c888a506518adc7084161d388cda209592d7ecaebeeca407a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamoi-alasiasaoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6b2ca3593afdc675467760668948c1ca4cff1520ed390e34eaf10b81acb7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke149 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b809f8c81d075ddeee72f76bb1fd2b67fb68ff0f8c1f763a1f0426f9f9e705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...