EUVD-2025-146530

Malicious code in verify-aikun-misika npm...

MAL-2025-158043 Malicious code in layla-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 107ccba67c7e34b96a683cc3d46385b5a337ff699249c042b0e68ff5541df8b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154186 Malicious code in dajouka-sdfaa-sd3a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a552e53938ad63a678351df56846b27fc4e8795edf89a7c9d2d968c93c3440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155646 Malicious code in hafiz-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f51d586e6250ef6a76e034dcfe139545110f5f2436e0d3d674d8bd4b62eff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159842 Malicious code in mansila-tila-madazio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9146c7f87929ac1c455ca185f391f695d2212c03d19ea6002ef9fa88cc3020f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166746 Malicious code in teaa-reborn49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd41b37d3ccef7bdc50930ce2567bf189faa8405c0e61e6850a132435e10781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150536 Malicious code in @miptaa02/awae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1eb60c4aa9c6124be2aa9d03cf0692d88f89b474242f9eaeba713852f823a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160205 Malicious code in masiolan-of-doto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8832dc5b2010b0fe909948735878280f8cb6f33d50d757369dd81940b87b0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155515 Malicious code in gurs-manci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1dc4465b4cc792b4abc28cb5706699b3644cfb1b2a0edc8adaf5f18ff26f042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167955 Malicious code in teagood-yakuna91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8005ae2e548f21d42fd9cd901c6f2cbdc6d1935c984958b04d6ad9a98fd52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150245 Malicious code in @mipta1/sissuspf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4fa1147c22ecbefcc8d9672ff2c24395864a9211097a5c4e360713da4c90b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-149054

Malicious code in teagood-namakai98 npm...

MAL-2025-169247 Malicious code in trevora-cir51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9634cc9dffab094e9c48009248b4cfcbd9c904b4a8aaf4e8092d11be7c28b0d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169491 Malicious code in uaragia-mudiffa-sayugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6839476a3ddee8e876d5d62b138e37e4f23799af0ffc43c3dafa9511e5f4a366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157570 Malicious code in keyla-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9df994dddc7be6bba312b31380055943bb5770eb500812a24d768de7985b163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163076 Malicious code in nokire-namiresan25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536a173445fd98506f68d5b43597e336a8b7177d3a724e511a6218153fad687b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162035 Malicious code in nasution-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e720996f55abe258427543904e19cb6c9fc85d458e89209c4b81b8864a173c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169039 Malicious code in tehah-nutay-ko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256df9b9c7da58e8b2c1f9a9cae09f2f176b88c7c837514d8cba2410abc2584a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153677 Malicious code in billa-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a490ea545b3b58c86f3de62c6dca0178cf67ffe6f7fbd3ce795fde803bb4b4b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168492 Malicious code in tealove-nice15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14440727387e5f1f6307159ff786ed181e3ae53d17d37565bb0e3893d6649894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...