MAL-2025-180754 Malicious code in teate-thy-sonic-noju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f948e833802114842308974184c055e8322651c8afc0deba32f4768898f59d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180619 Malicious code in teate-thy-sonic-kuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8f7f9d7d5596bb0f44dcb9d744b03137db01120e4b14103e782f7436119f881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179699 Malicious code in kisut-faig-afiguib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd680063d0c7f7f63a30a69c1d6c84dc172987696c8ca808ec1fe434cec9f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hauli-mul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957d63d9d916beb40c91a3d9c419f1e80cb82ab563a4d520d55f905a6a276225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140448

Malicious code in kupaio-ulokia-jakafofoai npm...

Malicious code in thumbi-vss-budhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a191520502165f78b7c8dfe2036692d37bcde142a9e3a571f572a3230ec99611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaiso-ola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab2efee687b5334debc51f08e434fa82615b72fec135d1f6f450d53db3c5cc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a1687af3e543d17faa954e230a96768b5d6f14e0c6f5696d958dc9b3670120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudufui-fadabida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0abb9835d99545b9dfe1933ba6b48c0f7c5f17c6ed0783f470dbd6ce0b64c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403471f62df2bb68d87de04ae3974ac41f0bea7efc3a160deafc5d73636b6e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140574

Malicious code in kupaio-kia-jakafafswafofoai npm...

Malicious code in kapo-samnu-miva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec334fc7a0edf36d27704d209d571d063173c2200870ea941b76c3626905199f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236d867e4dba08ef406fd7724de84b47867a2275ffe78daed3922c112595acac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satmf-anujafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0d5caebf6adae65dfe63111d6274a234f00e897ff6ff7f7b2460c5651d771b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idagfa-ratafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f55e5fea34829863338ddd769c8ed08307237054ec6478e0a37debfa8fe6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-iadsafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3cd11f891e8951d69f0be904584cfff72b797d9a15f4e84d0a51c4e7125f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b79b9643d226897aef4ce09471ccb6bb39070ae8e329284a93aca48f33b4a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mubafi-sunai-caai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8967ea3c427e48ddd0b785fb697841f0d922c88a779a9e5c7e0db316dc22e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176911 Malicious code in nuragi-sutu-gaviaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6ac6b4b76c922d3a426364e1242b22ba7191fca8b3a077a20457f318debab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179210 Malicious code in tray-iutup-ubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8363455a61ab1e09dd7d5a86bd4f60bd24802a66af6443d7a41120a5f74288f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...