Malicious code in billa-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87884553c12cff353be878899d93e9d82a22ceb1c8f0090c9519644a36df89f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b58836bf0b647d6bb4fc51b806b3aeb5ef4505df41a4c5270f724abd6cb8e69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabulanuli-nalaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41953ac58af6cf484343cc016a4853ee97f86fdd056c748a90f36f8b249b095b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84fa737bc4e1df0a182d3c2b816be370ae2cfc704fc3abe5d53198a03487314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gasd-13as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d863ff6000af6ea063978495d086a8f600326557b0b1461c6e049fa939cc3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bdd37043ca53ff478d16bd8f191a0ecbc683ad609bc3ae4ab77eeb4be66300b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fabfogfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b365e109b2d9a9cc8779e92afd6a45e6f2d91e31f6eda7a669a44bdb188bac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2120ddb16cccab95231a15b6d668a91543cc4f888ee3eabdbef253447d6c4284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5bbd644d2cf2fcb5f4c69bf9ee2db98878315da9f963fa555e49d835a0c5255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50ec8d85d61a1a65ef959b73aa85042eee32b6934fb45ea05ef4655918ce85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/mqhg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca38583daa1baf5164468b9b342771b047ad6f71ce8c352053412de8d931fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masiolan-of-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e79ff0efc084629248e235766337e1b1f0238a4b5bd04b5fd124da61d608d0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-149054

Malicious code in teagood-namakai98 npm...

Malicious code in cinta-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ddc12f36c4fbd9827d484bfdf92b510a2e05abf5e8f7dfae571e636d4a9f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151322 Malicious code in abih-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c324ece74986f35d0e620e78b92958f0af04c1b47a9e10887c1fcfc4acda5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155646 Malicious code in hafiz-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f51d586e6250ef6a76e034dcfe139545110f5f2436e0d3d674d8bd4b62eff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150536 Malicious code in @miptaa02/awae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1eb60c4aa9c6124be2aa9d03cf0692d88f89b474242f9eaeba713852f823a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160941 Malicious code in munir-terd-tsduyn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bee94296aa97fd9c6f23637944991d5bcfc7c12aa6487bcde52b6ec2a366d18e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161358 Malicious code in nabuf-oguof-dusui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cbec3e9e363edf830cff77f8b0fe40340aa7e6d8c97884519f109ec0e80f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160465 Malicious code in miracle-dibok-ikalabaliku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46745594518b0d6c9e44a6a2ca7ab9f462ff7c522aa52feb58941bdc8c9c8d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...