MAL-2025-172857 Malicious code in anak-jalanan-mdn47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a297e0df8279fc09bebaee521bfec9ec4cc28aa98eb93e9c8e827c8a9158e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177870 Malicious code in polymer-avonf-afof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ca73687406494f319aea337d2edadfe02e58d996322c6f9fff66e3724a9563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176278 Malicious code in namada-kang0-tin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed8ae2a13d0dea670f11a0d534c2584eab59459a3cb335957df30fc961f4a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174226 Malicious code in goditu-tuamva-dibud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3dd4d18f787ac64367fe6a36d936efd11ac679e074dadb1a4d39584adb8897d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179190 Malicious code in traay-patri-ertio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3dfaf0ad4b4aaff4505432638c4f5b981dffd4245366d584f74d669c488619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174375 Malicious code in goodafin-nuiyag-gifatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd2b308826e680ca5bdd475c811dea831814b8f24fee3decc0496d2b10d7f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179210 Malicious code in tray-iutup-ubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8363455a61ab1e09dd7d5a86bd4f60bd24802a66af6443d7a41120a5f74288f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178311 Malicious code in riya-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608e40c8e786100973cee06caa213f036afec4a001f62e8ba66260cce4acee4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175497 Malicious code in kiki-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f95ca22d6a62c3e502a2cd56d95b164f63854243e324c1f6762e7d60c070031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiagaiha-afafafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a86fe4dabdaaa8f16397b80c575294e21c824d648131f4e8bb219469055375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b79b9643d226897aef4ce09471ccb6bb39070ae8e329284a93aca48f33b4a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da63f5f704b0d08ef9e12097128500b87af30c873d59c4ab35e9ae479c94eb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-minst-nuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2c593e537f69f0e826613574b64f37f3ff5b6577bb408c6b9dd8fc6087c124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140448

Malicious code in kupaio-ulokia-jakafofoai npm...

EUVD-2025-140691

Malicious code in ksai-kais-ahakaoliaaji npm...

Malicious code in nuyar-adamir-iadsafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3cd11f891e8951d69f0be904584cfff72b797d9a15f4e84d0a51c4e7125f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idagfa-ratafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f55e5fea34829863338ddd769c8ed08307237054ec6478e0a37debfa8fe6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samnu-miva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec334fc7a0edf36d27704d209d571d063173c2200870ea941b76c3626905199f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusiautua-nutgagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0440aee00853a9a493c7a14c5b5dbdbcd5d3041dc2b2dfb39c2563b5d18bd885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hauli-mul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957d63d9d916beb40c91a3d9c419f1e80cb82ab563a4d520d55f905a6a276225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...