MAL-2025-185007 Malicious code in sonic-koig-timesxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b5ae92ef5cf5f7a898ee50bf8356005b3ec3ed7a594eb1a4cb040582649ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182876 Malicious code in itale-adci-ggryuyegfjbsgbajtrnntefbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec223f65f2a83835ea830f2e763a84c12dd24bf30e405112eadf3702266964c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185168 Malicious code in sonic-oig-moifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3dac68759470f86cfd7e18db67655ee0c654417bebe0d05db753ca982fe67a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182412 Malicious code in imodiov-kufni-acumnacffg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4017bd37bed218baf8180f7a8d67a732992a8cdf361cb6042c6545f2bf75c2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182456 Malicious code in imodiov-kufni-coca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a56ccbdf8fa4517c3e9db59bbc788c1f919ddf098c5063fad6e34d5ae9462f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ai-avuhusku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ff4cf4da38e7eaf69c1288218e5e280c7f0ce9d2c177505cd7d1f97fa3a2c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136204

Malicious code in itale-adci-hykaulaygkusytang npm...

EUVD-2025-137763

Malicious code in astam-ifut-dakila npm...

EUVD-2025-137934

Malicious code in astam-ifst-diakavgya npm...

EUVD-2025-137370

Malicious code in imodiov-kfi-cuwabimagvl npm...

EUVD-2025-136834

Malicious code in imugay-avig-ijf npm...

Malicious code in lobaic-gib-giga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768445c5a75505d80e82f45ead562c007e3083a6e9c43e71df29fc1e0cc14cdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b176efc9e7e4e5b8a98de769bc40399b2ea2dad869c2b5405f228e648103c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137737

Malicious code in astam-ifut-diugoa npm...

EUVD-2025-137860

Malicious code in flights-tuig-alu npm...

EUVD-2025-137031

Malicious code in imodiov-omfi-cafacea npm...

EUVD-2025-138138

Malicious code in avangs-olium-nilvant npm...

EUVD-2025-137110

Malicious code in imodiov-kufni-coc npm...

Malicious code in indea-fodij-agafaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb446a20f0c17cf06cd01f4ef86fd758b638806e168985fe5948675190195016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-timeseyawaxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50688a346d036eee7d66a1970c71f3ebe92162c15cee2d4e3b01b265657e8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...