MAL-2025-174643 Malicious code in hitachi-poke125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f4e57ab64378db80878ef9bd4cd0757c9fc0a0d79fd1cf463e6c252f0d1c03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173813 Malicious code in digo-kaimi-aiokoalam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642cb5985883ca5f4f6303e4a096c200c06cdba70bb2ae83ce25ed74f5d2edd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175327 Malicious code in kapvino-sofgdi-uaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fcff5169e12d0c430aca4d3c8a48a47ada9118edbbf0675e321f1b2bc95703b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175645 Malicious code in ksai-kilota-ailoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd27783221458b32e526aef5d5cce99381b344ab41aa80d4fe225a414565ac8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173633 Malicious code in butanaih-asafui-datajuhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ef6abf85c8ead870cbe6e6df740f76759efde7afb9c7bf9b0058afa1734048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175557 Malicious code in koko-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf271153622f18faa19ee77a88ed800d3e5dd3c1cca237c795f9307dc4487de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175940 Malicious code in mahiyafa-sutiayanu-gandofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 883af245f689a4c0b55a8aa601bd8f5e14bfac1634c955062b37e22effe6559b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-142843

Malicious code in buta-fiuaoofoana-inafa npm...

Malicious code in sahu-satmug-fainufaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1db1d61b93fce88a672cb2e5f24c22154c920629e4a30512eab8293b3890f3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136491

Malicious code in sahunim-satudfui-fadabia npm...

Malicious code in buta-fbna-nafifggfoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f292bca541798cfb674f2d3cc15f3f16c790918ad0c93092e5f6d006894b839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f315f3c6203e88dfefa369f8ed9361f28b31751946ef61fabe537c0ed621b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-s-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf3b81eeb216f3823bd453501cc0cb527971e23e21af5ce174ca6b9cfb71954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-nudaniaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a32b2e389c364e6877985bd50b43fd5a07c8aa166284f39d377ae4e2480105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-fadago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40db4facb6535f28a772672811c05df256f84881b83a8aea27a15e0266ddd857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140155

Malicious code in miftah12-miftah npm...

Malicious code in unimna-satgb-naiguab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22f78adc8fde737dbeb5e5318dd5d007062fb10430bd8c9e4b8e7ccc98adeed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annnnuuuh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d1b6aee720d11bc7543185fe38104694c2be31ae5f4fac6fe79e08fc1b7edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6738e894f79b0190cd778b9807237bdc8f3f34af884723f89b4e560849a13c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-rafoasiabsua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe81d3785c166eb2b6f2cce1cddd5b2bdce70a0c1163a92462bebaa561248fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...