MAL-2025-159426 Malicious code in manadsi-sfaddia-madida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9740a6dddc8b5b084478bffa8cfaa6727e0b760e51f5578138b9379a23b5880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168868 Malicious code in technical-alin-tubuinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f35881ab207c204b288c91043c8e64555220e467734d590e967292596d92be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168308 Malicious code in tealove-darknest5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2450dd7e2c90f7ed7d373a2792ab425962d126c52b195830187bf5952158fc22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169593 Malicious code in uarg-masituhai-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9dbe533206028880efc33fa2ca677761cb44c702a2623dfa5e8cfd8ad4449c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170226 Malicious code in uyia-iaydut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a057e94b830ba8e1807669f78a8aacf36dd345bfc63d6b5001915c212d092b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158441 Malicious code in lookingan-nalako32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96869e83e9438fd35d178d8eb5f0f51467d3ae4fcce7432a35035b4daf27021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke149 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b809f8c81d075ddeee72f76bb1fd2b67fb68ff0f8c1f763a1f0426f9f9e705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ab058f953a0762fe0d3c8d57867d9fd889ebc74eb36587a52023f773410354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50ec8d85d61a1a65ef959b73aa85042eee32b6934fb45ea05ef4655918ce85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee4099f7a34f9a05f6456161d9a55567c2e671332c5ea48818c58e01d85d8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155032 Malicious code in fauzi-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bcbfa55a33a177d714030adf5a496d7b3ebe11a71aaf52780ac9064b731d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164151 Malicious code in pilka-lni-limau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d64882449f3349b9e1034fda075c3287af98c7105593ad05347811da36e32f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168780 Malicious code in tealoveness51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ac1b8acc7446775280b6c337a4b1ba0bf75bc254f6d926ece5da9b5a325375c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165044 Malicious code in rival-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d4e4e4cd3af780a1179e2c7ad7e3922130335802067bdfea1c5c83c94d41b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158956 Malicious code in madan-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb6bea0a92ea263618c379d32079c2ee86e5ac924fdad42f38f4204c5be8a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164807 Malicious code in rinto-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d990c66cef5395d3cb372167ba80ef1f545f5f670b6dcc2cf1e629907908a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157988 Malicious code in lala-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fcab47d573bb4978360bc559c7eea0fc7b2a48b480ae13343b4bcaf27e52fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ddc12f36c4fbd9827d484bfdf92b510a2e05abf5e8f7dfae571e636d4a9f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-149054

Malicious code in teagood-namakai98 npm...

Malicious code in @miptaa02/rassdasdzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5eef8632f09906fce790960af278af350ce5eea42a2c9ce9bf9655737394cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...