MAL-2025-172541 Malicious code in verts-otimmo-ffigggafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8ec906f4b5cfe135af83d35a4447f808c8f957982c9226e6fb4019ed5adc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172185 Malicious code in augis-lepaod-matanidap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728a5426525d5c65662e56a82b6c0fe824bcc59b565247a110c0deca8f853291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146161

Malicious code in aburahman npm...

Malicious code in maevekelly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376373d830b5b9c73f83e3fc78016edcc3c8c40456c4c8426452dc89a5af5a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171277 Malicious code in graceward (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c670bd7a862cfb51104615367cc1bd1eb1880fe3eaadc996e7f65dfc91fd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171054 Malicious code in cometobserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570b79c8e800013aa7b525f860206de1b4134ffbbf91e03ca2f85669f14f9915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saoirsedonnelly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fa22d1c89dd2641d39dc495da4393354374c3ebcd9efaa4979a3fe8a578c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171713 Malicious code in pagi-chief (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068da2729955f81196162b27348a9e97c134cee022f20dfbb04534d433db3db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171701 Malicious code in orlaflynn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d6955a5b48728f4e3575138ffe3da03fb1a0d875a2825b6eab6b14deac0356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170764 Malicious code in akifhaider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b4d458a99843c1e030c50b1640c6aa3f64db7eb0158c0652a7f3a1b5d073afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171716 Malicious code in paulocosta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc89ffabc253abce5b383433fd6d61a366f90477a4796100b6cbff2e2c57d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in badrchocolat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0660a9257b4a9ea40a67d3cb5c5f37d56ba38a9b11e19230522625a3c4190d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-145912

Malicious code in aoifeoconnor npm...

EUVD-2025-145233

Malicious code in michaelturner npm...

MAL-2025-171495 Malicious code in lexiokan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef385ec441086a5d8128a2f5dfff48b1fb4945490c275e244d2f00453ad4a98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otau-uao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3446b1c8df6176c6ea7ed5fb1a7cc811b890c18ed260d81d67d1e4ea381f4772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagimas-ofisuogafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79f58a5de1943c02ab3b84f06a436b10859ac8f592c8f5130772f10225b4541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d7beff86eddd5a9a477b696907126110feaf9e8c93575f339668c630c9d819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2052eaf7f9eebf8039f76700df6e6a5702a632747b9b84d468d34189f64196b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81bbfdbefeecacfaa972dfb04e693c94c2606dc6fce520210febea670488fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...