Malicious code in bufpani-muisyau-fnau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d05588a3ba8aa2786e6de6d6e4950e82807711222331f3b85a7dd5fada0d0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0b22f4fa2f6379d9076b99703b863b55d00258a3936b5dd446a141bd37055d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928a83df657a0766398d8b92627dc61b713cd46bda95ee3b6ff11f44a355ef90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nanali1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18a4db7a50830dc5c7a6292a1b67a8e068eb84219f0a4612c82f0fa7fd285347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157490 Malicious code in kentung-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e7d0030aea96a4bf934407d3cc7b11e6b90856b7ba8024bcc01c7f6fac0db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156668 Malicious code in inufgi-gotma-anafugataz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97809f5b2fe8992033d7e4ff30e17d48067fa897905410280f000a4823d24784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a65dafec35da0abaac27893368df1bbc99aa718fa7100e5a2d1d5b900dc2df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musasik-daistv-bodot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf12080d71b234b251536eb7d6fb254d7f3d555305e0699bd32697e31204817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160510 Malicious code in miracle-dok-uikaaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e01d1856a50b243e4d2d2110ec9a54f9a24a9228dd4c9665ef54b9973438671d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namadata-buntal-butya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f67c8841d42c3935b58ad59d728dae977f00cd1cbec4b2887544a7320b6979d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933a7590e16f3e421328dcbb8298f7477e603c0618aec3687dc99f1c13c70da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153826 Malicious code in bitha-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9279a677dd31d83f864ea5ab52a1cc5d6b7fab649b06aafa27a16380bd99651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supervisor-achernar-grunt-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48f323ac3d0266c611dc785a29dda3609bfb5ebae4b6c82d2daffa3d7ab3ae38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124014

Malicious code in orbit-hydra-test-venus npm...

Malicious code in mocha-ariel-wolf-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ccd0516e5a02ce30bc9aa691ace0de847ff78b26204bb4998a2be28a48119c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-babel-tethys-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04a333bf1423d0e012301db68a1e6f00312db7d04e434040b97bb4bd1191282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149235 Malicious code in vulcan-graphql-sadr-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28fd7869c1e84447ed5bb31e1a38bd35e970545d9af54c68a3ce47e58301765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147903 Malicious code in server-passport-run-script-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549ea74d20cdc6fbddd62cdb479131c1ea4b36d4ae95fc8be2221fff390ace01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144351 Malicious code in levels-carpo-fusion-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d8d5f23e9140fa627019e2ea08fbc2a8abf4e959025b337ee09e444f301e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-private-electron-builder-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efc83769ffc86634fb8641fd68519805cdc2c8c3d59fbda9c45f154c7b48d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...