MAL-2025-184911 Malicious code in sonic-kag-tgivcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef9af6dc54f395ebaf0243fb570ca5085ba33aa4b6c04f0af5a1d09ecc59c986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idosaho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a7e07ab273e55a9d083051e9162c964229095ee37f756dea65789c428b66aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fhutdywehrbweyuftsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c2f8a673aaa55be562597b879e7e4d84d0cba07ed83216b579687a5dd393843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182813 Malicious code in itale-adci-akontolbapakmuulltrjyfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b21d0975bc22c8c0a850c59d4e27ab16b4946f97a9d8ecf7855418bfeb8197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182010 Malicious code in flights-lutug-oiad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbb6f95792bc674d1c22a91d6c6457b0287e5d78b6988facfcd98a64c00ea36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184223 Malicious code in modasiv-kuvu-bavoiyabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f00acd245b0aee4ec3749772ca746248185f263e52968556fcab7089824c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184946 Malicious code in sonic-kas-ahagauji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3368d00443e2132d1d94f66cf24dd43e0d10d98b115e38bee6ce1662578e736e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184537 Malicious code in mokok-lukaunai-hunaaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2ea11e01db62d2ee7a9e8a3f3c6c7202c2a7c5af280fdaef99a500ff4cce4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183766 Malicious code in manu-oyib-gikis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ff88fd22a1deb18e2cf39e9cce0f0f3fd8ba5af314f85c971830db68ce6170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184334 Malicious code in modiov-kifni-ufbaceuiacfovadfjoux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e897962dbd887421ea71268a37af10dd000a66033d28a2766453e617e5da85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd8f4384d0ca5a78ae7c5835d253be25b9b2168ca40d33a015a038a72c61740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978a579f8e8be9ad8a7dca6af6d36869b2caa127ffa3b39fe0efc8e3b8f6f613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181479 Malicious code in cewe25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2629b933c76aef884e1a71e636e6e7e7a2037a0f8683cafaba6a987583b8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181324 Malicious code in @akunsansan0/pucuk10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada5f3345c06278bd6c8e2ad2a4a5407093c1a3e0d6d61210edfa9d8c5c9412d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181271 Malicious code in @akunsansan0/jorelat4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10ba98be00250c18665ec0ecc340b87c3c9474b1d93c4c3fb7131a82ec0ae86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-akac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0417ede0e2ab34d6d72d7bb395b56985f359f92f75b854a261b170dd127d6ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-133921

Malicious code in lookingan-nanakila41 npm...

MAL-2025-180599 Malicious code in teate-thy-sonic-kifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02f19ab57ee1ce70be35a6065ec84c90f8bfe10fd3baaacb2c17980ce974c1c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181003 Malicious code in teate-thy-sonic-ucso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733dfb2de37fa635f7069c4df63c5bdd887d4e14e52565ea6704cc1b2089435a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180407 Malicious code in teate-thy-sonic-gaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5891eae1cb959f48518205a6722d583ff84de20a6a4b40673dae4cc21d305977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...