MAL-2025-177279 Malicious code in poglymer-oghh-fiffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49ede547620fef7a5e07900efd676e0e66ed0487eae453ae3f8f21b03973b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179298 Malicious code in unimana-satgub-nainab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e088aa01cee90726df8eba7accd4a8b28b8f007f36d46ed1deac675a9589d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-142011

Malicious code in goodaan-ngafsa-nfuagi npm...

Malicious code in riya-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f8aeb8d6a8c0643c3f19c3b9458fb53189fc9b0f2fb13385e3fb295a606ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426157b02f97f1d5957632904c226e5fe63f26142f598d4ed5a9774b439b429f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiva-tumva-dialu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da4e726ea384f811221808315fcd3204d87702fb07ed787e49061bc9f4956aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-roovsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35946e3412cbd5f8e9e9c2fe942da6e7209224efcb5c175bde5e71acfb126db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc3d96d73faae58cfe1ac3c3892e8944714686abedf9ba9013acc779382b03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodain-sanvgaunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d3ae7e37f89dc4de1c1f358b4fbd2856de89c9de6fd8fb57d089d68bafee18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudufui-fadabida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0abb9835d99545b9dfe1933ba6b48c0f7c5f17c6ed0783f470dbd6ce0b64c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-busrt-vae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a062ea656ad77fd0b5cf40bde1e0480cac3ae0d1710d96aeca0853dc81c04f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutai-inauva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54eed6b8094bbcb11a10d9a667096ed4b96fba9444a62a3133e5bf1f1357f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gafigaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f23602c76681c752fb16ad8ec1d93bd7d66ca8d992e05c4ee8cfae9aae24523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e782a1a27764ffbdcb682fe3c7f6ec286f6083eacd5609220b50a5823b99623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-gaogfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba14fe272be5aacbdd53b38a43f40a3e0649cd5b81386cef52d28d4774b801b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annnneh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08cf0fe4cb167f08e96e2edd0a9627573d40d2ee2dbcd784688c767529ceeaab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah20-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d469586b77d569657223f8c204a911583c5506d273774addaf1680edb0ec29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibga-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c465648a55ed6a25186807c0904850572dffbc38bfd2b89ed4387a6aa9d3ae50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satigoigof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71dd6c09245b21364603e267e3258505570b6247d9d8fb66675e3820e793af5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-bafaaggsig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9050ed1093c1d1bf32151ded226884378a67a8ce7c8412c05ebe58e28b884b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...