MAL-2025-189126 Malicious code in registry-firebase-bunyan-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d9b7fc7f6514023a049e5263cfac52ab080b751f5f9d2fad7965815713cab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-afdaeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39abfe7d54d9584e02f41997d6b2fe7edcc14d03eb6f367e8694d383ab87574a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136039

Malicious code in itale-dci-rrsetrtt npm...

Malicious code in modiov-kin-afbaufcaducxc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbce9d421d08578a5241f7fc1ebc5dbcc00d6328784f91c724cbbda4c6a7f662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lapkasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2710810191e421651fec3d307b30169d692fd363275dff88b323991bc01d91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacevavisvoetfamolcaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094ddc21a92790ad58acd3dde08a720c063a1f7fa2d06638d36d8ea7f6ce22ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac12fa37a584dfc9c5da2f072287546acac08431d3e657eb261c398e5a554816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183990 Malicious code in mitok-doni-olil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d0b4f855fbba4f261c85b4ff635a5da868c83bd5e692f6bc8c87c26304188d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181779 Malicious code in avangi-oliuka-tamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af515cadb5ed3250e691d37b9f9ab486e70a71f37dba78f915acf69927dd1c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182384 Malicious code in imodiov-kufi-comoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a5f1ecc502ef5bd23f3d2464941d145dd43ab1c1758af213a85415fabe8b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182377 Malicious code in imodiov-kufi-cocai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3353262f2d9f56e47ed14ea2d3b81a9fa57bf37ba744304ea7d3304c6914ab8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-fudvitafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255a32e90533a303df36326583252dd1a00c5aea3e02b9c8e12ed9585f7f3ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afisigafafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51dc77fe91f8f16da94855493ee1d2d7624dd0bf33f56a0d7df7b6a5d0e76158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisisgo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935558bf7fcba45b5e0f1ebfd079722900bc309adbc5580ac6495bf463d3991c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kilan-avmn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d85ed56f2f81b76e3e99e695be1071a98d59a1c172e7401ec88a47407907d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afibanaivihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dcae0368e3c64e35ec033cae00cf5ed98d1a5da4bbf3e39b9f1fa1ce277c328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fc1a5a45d5a0d362d8b6e0160913737528bab4d320800dd5d3955a2c46bf18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182816 Malicious code in itale-adci-akontolbapakmuulolotlrtjygfsri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86efa15efda558074b0f2b2fd064f3c0bc9adf03580d9149da9d064486e088df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183038 Malicious code in itale-dci-srfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec56681fdd4d43d646481b0fa63418ed08c0684e6c620ebb1c13055cfdf2b543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184911 Malicious code in sonic-kag-tgivcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef9af6dc54f395ebaf0243fb570ca5085ba33aa4b6c04f0af5a1d09ecc59c986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...