MAL-2025-173493 Malicious code in buta-fs0boiuna-gaaoif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659ba8170b8ca5a64e5f381dd0cacd00ce98a71b8d39297640ff436d707ae7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178060 Malicious code in polymer-idasivgfa-ratafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9949cf5624ebe8ccdf11cd3cfd898d7484829e04805cdb2b3779d08f4e77f7f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177700 Malicious code in polymer-afia-gfga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0a3496c46ea8137bb05176878d81586c6d5333b30b3d33459c916bcdb3107c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178322 Malicious code in riya-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf86d73b336741055705983a06dbbcc4c98bf649734a6b9815818b6de41cc1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 625629c2c2ce7e4171a991d5149ee39bdf290161a89d6ef0624657551eb4dff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-da-rofad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e78d564178c624697220d381bf2ba996dd8ff3e0078bd713c422e92f55d1f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afia-goafga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278144f5242cb2646164ed63a8ae9d4cef40edcda53a84863d3ffea20b43964a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afifa-fasaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d1a4ee739cc7939fa78e199a01d85f2002bdc9c1a0df380205d25bd044bc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tehh-trded (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593ac8b69e8c880a589055cdf56694d050f7420a362138fcb4c7d989b39288c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satafi-anjigi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b3772e7d1260d0e6b6f7f2818f34d201e92c6ef480a3c6f1747237c3828b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ulokia-jakaofai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabd98d931d63618ae1d99df529255b5862bea427b71e1afe751d4210cf9206a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-minuday-nartipaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d5c2e7a6251e262b0362956fe8b72844a761404ac92f89314a759e83b9955f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-radat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8c866265dcf3d1ba48879ad244df3154afff2e835f95f4be997a019917ac15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pzp-poim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98db267d2ba008de7121a4995d5b066a4dd3cb5a9c6bf9bf29cc8745d4365ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kilotaa-ailolioia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19043931f21681be57f35065540f68f045aa5803c19be2efb0ac9213545b6b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-upozp-namaaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef19986e962687174a52b80663cd1460794afcb70235a9f3e6c9b71d39b5465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadsg-fagvguaganda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2991aeb64975bfd24825935d34c2a24cc8f4551eff742f18eb7c2988cf7c2a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-diafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c4e4908a72b45cad1fab25ae9cb951fba01385cd406cd496b7404952da940f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141465

Malicious code in hunim-satsgamf-anuafai npm...

Malicious code in miba-mina-naudsrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf19c3fbd75be9e09f9f16884232fc3c89e335c7f61322df8b67bef38c98e64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...