Malicious code in teate-thy-sonic-algu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bee1f64bfc8c4a4cc9b16dc06c5d56ed9e8b627fec21be21e70d4c217744df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-afunig-amfaaicaiuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe45ff5c8b0396a7566c9a14c1cfc6eb9384b7d998db3208c146cbebcb18154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179678 Malicious code in kisut-fafunig-amffia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644c345826873c22d51a1f38c4280e77e9045383273d9aa7c8b8d455f0b0181f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179942 Malicious code in lookingan-nanakila125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a3b963079e9e2d2a4d50398bd359f5ab9eac3642cbabb92021449a8ce09e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-kafap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f58cb81152eb3d2ea2559851043e4e947bc5e9a8f41a614dfde0cf1642bdc23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-dekguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18285e38f9ece8ac177ec53c9cf1d48e0343a9a53bdbb8c610a072e63c40bffe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180750 Malicious code in teate-thy-sonic-nogopa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b4aecea17db0bd93780f1d9ca6b55deaf8e0e700e6d3c1c957a0f91c3188a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180544 Malicious code in teate-thy-sonic-jaugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c970ba9207937ac1b307cf873deba24926382dca02de0d93937844790e529f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-ighfnaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c98b72ec3c481b593466772941c07dc5fea6bb3d611cd7478e72edcacd19b224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsbers-ytug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d397b9bd697da72fc69ddbd3de6fcdec4785306f9060cdddc7d0a9e459d207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139250

Malicious code in nuuuuuur-zidan-tea npm...

Malicious code in hitachi-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cd985f7f09e39eb34955b27b1fa599790c0c7f5c5ab5eeda540dd3eb1d5902a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonadff-abdma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93bf11b89357070037017dd8e27b6fe6cb2d82c1f9537464746d0c1f7354e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179392 Malicious code in zaskia-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88086ccdaccc1bfd0c363c7a487bbaeb16438174ce5c294e475caf062fe2b28b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyg-gibafitfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5303ae700ea6b5028cb35df4378112111744ced9c984c3a12fa2d08249fc16f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tua-inanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f0f3f8aff3ad8c14c60ca9aba5f4d1f60fa9f3983855476f35d21f58c8c863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninana-mado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15856f1d268a9c2603250c25a6023de27a9f3b8cc36981af2d19a6a351bde571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141612

Malicious code in hitachi-poke33 npm...

MAL-2025-174595 Malicious code in haruni-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3715552786c70bec7d7d30ef6b259d84c713a12bfaacf6ce33e022dfa6c32bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173668 Malicious code in butanaih-asfi-diaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83dd04a22634d7eb9ea20172d8c9b813834251db957fb5c530cdca2e3048949f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...