MAL-2025-160058 Malicious code in manurung-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3987159359f47ab6e508c2a85ffdd1eb20067a9d5b4079eb5c014168506764d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168308 Malicious code in tealove-darknest5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2450dd7e2c90f7ed7d373a2792ab425962d126c52b195830187bf5952158fc22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155249 Malicious code in flight-da-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2db8f679a974eb31caf53ca6ed9ea68d4e4fd3c572e107ea33c0d7fc10d1172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160866 Malicious code in munidr-nerf-usuasl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5cbcfd5f048fd43bfb362dd6a61e3c81ed68752f90a5ef34f9d3dc51f1200c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169593 Malicious code in uarg-masituhai-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9dbe533206028880efc33fa2ca677761cb44c702a2623dfa5e8cfd8ad4449c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166073 Malicious code in slamet-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9082ed568669bd4864176672c6ff543116d3d27bcca8b977dcb1df28cbef36f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169775 Malicious code in uinsnu-lotipmi-kilr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5e97da9c7df24511bba803af050c292339c6206634198a49df2f9a0a88c28e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167430 Malicious code in teagood-nalikami31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b3efdcb632a719cae40d4009bb9d9aa638aa689bfab17fe1d13d5529383349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154014 Malicious code in carsa-rdesti-butr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f7a2219c0a794e54ff0b142957255db41300fb6af9cc767a76e030065c6661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d634d2375d102d96b8a989e2f3ae451cf0be3eba9ef1738b1a4d096abf2e9d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-mansapa-masnfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926cea04d9208937b081d5ba646404486bfdca574bfb0ecd31b408612e47dfa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minda-buipenajaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b45da3088d21865ef96e35f87e6473d677d3dab980b07aa4d3d8b5d21d8525df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146530

Malicious code in verify-aikun-misika npm...

Malicious code in digo-kamoli-ailasokamloiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc090e6894deab2616a6a1f184f882f3600fd853672abd009b876b02363c994c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-a1rea-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cf06cbe475c11c888a506518adc7084161d388cda209592d7ecaebeeca407a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayai-auioanyaugial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce96d99719f1401b082ee88820491cbc20acf39dd06497ac5b5e0b80e2eea42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scisor-rmana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005bbda55e07a25e7a5caddd48489da7e4ec5f9a6ecd26ac28983b0c1baf7c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c055f95f4e04c9fb39959a32aa67460103105b0846573ef908e3ad072a2cfc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugaat-doauufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7490ea91715cba6ec1df08f067929bd0c694d4f488f9e74ad485eb7d50e8cb0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2ff21e573846b4e5ec94a6ee0d84bc32afef3268419eb7bd652b77ec4be523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...