MAL-2025-165355 Malicious code in sabua-muhayu-tadaaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b451bdef77178ebfbaac19898443ed3253e8954acd811cfbd02d21161fec0061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04b2eca03fbda28c9c80ff19de4990ada10bdcb623fd9f60144a093688a53ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22b20da043cb8b2cd22696336a5d04253be6300080e943db0e410caf6cf1ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demdadf-nuaio-adudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4138088002e645d841777c757e37f161c34f4802a645a6c28084a496aaf46484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa55bae5f9b8810363c5324c43a0a5288f587e076331e1dfb0733088194360e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46123b14a4da59424b77092441eab5b1d3a03eee3c4e71c6ab169e4ec7eaa0bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carsa-sad-buatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d54a0788a748b8e88ef1aa974957dc5a463618512a09497efc155f1e8747ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-teadf-mukiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 580e4983b5987ca0a3ebd7a70121e6ff2a4f032c81b014b9b32f2b6336cf0dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211ba75a2f1623c497a7b3c606e3864a269f428de7cd2aca507c61a04b2be211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-adigfhagaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f78c635381cc560fedeb943287f969a480b39dcd67c28187857dfe2e45decc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a42117652eea8fee4ce78b70aabeac218ca284dbadd5bd50e96b5b754299b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-149570

Malicious code in teagood-nakama74 npm...

Malicious code in abiba-avin-au (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855c852ae79dde102cdcd8940c6046854d40e9e88ce4cde4380d45e56b214512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7cf61624be4d346a201b0ea00c34142112d0d8cb28e60b8ba44329b100fc262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-alufuai-ayvaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0552ed2bdda8f99bf243d37acd7bab259314a109bd7b6b4bdb0fd392f88f8ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c08b48971385245fa7726e0cb92dabc9f51b371c655ea307fefc6b818c196a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7caba44dfcd76905832522e43ac80921a79bd8093a960afd6219201a921930cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carssa-saad-asd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c0fef7ff1ea414f1893b3885a13deb63063cfd06d6d805e9dc8e37cab4302a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisyau-fanmffiafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4d80608d3df9fe8f804facf1ca9150d2cdd11c76197b33cf0d674325995f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc292fb78f0c66c62a8c124d99f4d5a56ed0a528ecf99b40e11ed11f0451cca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...