MAL-2025-181059 Malicious code in teate-thy-sonic-voswab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f61512aac3d738995c492c73081860060a6e8d6c4c9d05eb3e3457bfe6a1d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180186 Malicious code in teate-thy-sonic-bazer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e58ed8f9415ccd9b15cbaee3f16790b39d1557099a06304e41cdc4cec7cf6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179937 Malicious code in lookingan-nanakila120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e4f19be8bdef8d85135022dfbb8d785e27d9471f3cd89d51f873e9be23f96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180449 Malicious code in teate-thy-sonic-gutaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa8fa713f088cc3b663ff0d9c601a4d23f28156feb8c10246dc03f926f865eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179483 Malicious code in anabuyil-inanhu-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0631d72fed46cdb91ad5762151f9b9c07a819a6f1faaabfdfd54f69709bea34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175817 Malicious code in kupaio-ulokia-jakai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e034fec80ccf12c1a68623522d16568dd84357b32040bd068ca8dceb79b4079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-buyau-mgis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80399cb65d640c562abcf8827f52859dca3711a08c22417f4890e440cd8eec7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodan-ngasa-naf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efc7ed2281119963bcc90c4e6ed0993917f55f8aaefdfedf2bfcebd52add2e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kais-ajiobnolaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9433198100c1be04aaf3272ed26a7531ebb9a76e723cfaf5e07d55ce5e56c8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avm-ravafavuc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c701970693286ca6cace0ea509ba93d269987c9ab09ff6d95caabac6385278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-agafafaagmmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4bf8cb61ffea72da49d216cccabb7364250aaf83aa9c235c26a35d6560d2902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770be846896acb554bf1ae374aae36b8a8e221c2d3380445f515ea6e1b36b9ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141813

Malicious code in goodain-sangunu-nutagaiga npm...

Malicious code in nuilva-bavia-maayav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80acf1e13e844c684b5f1547c4d015ca5a996289988791cbf41c059c7dbfd672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-aigi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d806c68540240389ffcf3c27fe194d7c22303abb082c96d6302a3616bbadf00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174316 Malicious code in goodaan-nusafa-nfigasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7ea5af768ec487dee01cd9b642a79c75402088ff9d4b853f3274e0e1540e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179009 Malicious code in tearich-ralat5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f065aaa52eca920beb2cac0e4dcf8c4b1f020a96c65078cc5f5292bf0a1500c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174847 Malicious code in hunimi-satib-nbib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674e2a206b0136a27d892198584cbf4c1e95997b49bb05c57428bb0cc1697bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172638 Malicious code in @mipta1/rea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32241fac5a34079be1541524323260ea2357254ef22fc2cd2c8d8816e81c7830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8affe1286dcd33992c5dfdaefd96ec6928fefa2d3d0712cb65fe38027f18f0f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...