MAL-2025-181428 Malicious code in baso69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978a579f8e8be9ad8a7dca6af6d36869b2caa127ffa3b39fe0efc8e3b8f6f613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/teagunz99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e18a5bbdb53c917f71debc48f150001f8a1c6a63a6373de4f96450e9326fc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181536 Malicious code in roti29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4081586b459393561fe22e1639a81652ad5f9d090bbe7efb31e27ad6070d6a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181469 Malicious code in cewe16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70737668630f93820f229e54051acbeec29cc2c6927298206dc6739b12b06db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-firifo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5641b72dd7ec42bcff9958d30991b242be5ea95cdc3e48938c97ecb5c0c47fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-133370

Malicious code in teate-thy-sonic-daefu npm...

Malicious code in anabuyil-inupva-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b2f038507a6d08974b474f577d28e08686363c3207b9d234e14ac9b38748431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-irabik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f78c9b28880cc882bc9920e44709df64d9f9ccc3ba2676e516e04a7888e8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-lethi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3243eea45a65ef3a7a387fe07ec0cb321210145320ee31856e8ccb041577880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-fafunig-amfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5295e23d3e705ae40d28decf746b543534eb203b88d2f28f3dd3d45de0348a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ucuwaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e22526584efeb8a7cbf9ea2c1978ceb89a493f9ea66fcbaa0d254302fcea71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papoa-0pipaimaoaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11fcbc06a297f1375f74863ab3f70b1fe4343dcee1f0f641e6b03fc26b88023b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-132815

Malicious code in teate-thy-sonic-juse npm...

Malicious code in teate-thy-sonic-toove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f287efea9e4d195bb7761bc0865dddc285327efac7f82144dca07331a2174b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papmoa-ymiaogia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7976a7fcd6198cb3c4446ea7455bff5bc8568d8bca6b434536f2c6fd3a60a1f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179975 Malicious code in lookingan-nanakila5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7f246f93d0848ef33d00f38bbf8852898da1a5c2e96089bd857af0a84d6771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-pobob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94ba37ee5a40c58fc4a0d0b800fb558f5e303576690c868a4b11dae1c135df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180988 Malicious code in teate-thy-sonic-tunej (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f410e961b54fbef72c7a43497c96c79fdf7f8b6f5f979e21142ac9e6ac98ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180300 Malicious code in teate-thy-sonic-dodec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 648e88313aa443d876f0b246b884a1d4c996da2bc430446af3f18ef9fc79a286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180619 Malicious code in teate-thy-sonic-kuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8f7f9d7d5596bb0f44dcb9d744b03137db01120e4b14103e782f7436119f881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...