MAL-2025-176750 Malicious code in nuilva-dadre-aha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f76c2f4a6af7ab418c31910508f54aecbc748843fdd7f9a534055d9503f42f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141512

Malicious code in hokage-31 npm...

EUVD-2025-136572

Malicious code in sahufarf-satidaf-favufati npm...

Malicious code in nuilva-bavia-munvda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38f10557933c09c94195b2470a7b0be5142383d678aa2aa087e522fbc7410c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gigsb-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4204437d26faa4360441b06e58b022cd53b658b1a0959c0494d54f3589e6fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satug-iguamgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7b2695781a2a761d10bc78a0faa7a0a7a5dc75003e1b8b22b7d4a0583fb34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-minst-nuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2c593e537f69f0e826613574b64f37f3ff5b6577bb408c6b9dd8fc6087c124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-ugafaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30aee34cc5651400f9e3c40028fd578ae287da983c012c7c64c86f10f2af7a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-radat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8c866265dcf3d1ba48879ad244df3154afff2e835f95f4be997a019917ac15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-mem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcde3759088b77d57f90920cb6f1f816139d5c49f056cc9bb6b3cbbc8b8165e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da63f5f704b0d08ef9e12097128500b87af30c873d59c4ab35e9ae479c94eb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-gifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c65742897b306ae591e089209f952552f52a70991d9ca77b92289f38bb3be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4e6270dac29a8f84fa31daf4e02e94e53f3b2af467cbf55335038b516c0347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-farvadvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d9eec3c8383412bad75c82dfea73ac69790d96b0ea5bc2a6438d1b569950e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440486628efcb099562dee61bde40f559f662d012ed61572abbcc25503ed16cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b90334e7c4e59372f4fa1e7ff350940e71b04b2b22b098683df5f48c195795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfadsid-dfadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad96207a9394ee1ac2ed28c57d37c2873bcd32c41f3f44d635f7c83cbec61e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufai-suffi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57620ac9350095f2d4011cced5a9c577ea8809131d3c2f81a689ad7b7452acb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satsgamf-anuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4eb5e4f536f158747fac22295ecf541380fa465f5422872fe7e94ff57089b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-fuafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78267d8c9a3b938f521626ab552a8281a38dce5767aa38d4f4879227b9806ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...