MAL-2025-161929 Malicious code in nasrul-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbb87c80c914068bd0de5ca5264d7a74e9e32c41be1e95a6c3879535d25c6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166247 Malicious code in sunden-diak-itarukinyukia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e2ec17baaa8f02e262a4dd450b142cbb38ad4bc1215657101bd8561be48f8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156096 Malicious code in ilal-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60fe13d0ff1031b7021d66ed2a1f5c73aca1d2bde28d23e8d44137d6a68c5306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153512 Malicious code in avomainah-fragis-ogudfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094c08233eb0f2825a6c3fc47e90d7ae5e8a81104bb38609fdce02be3c1be9c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150125 Malicious code in @mipta1/miesseyeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aa119b5b3225b9b086c81375ca26e0d940fa2ccdc99b26b38f4400c5c7b677f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166184 Malicious code in suharta-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b654c9126a005d4de8f872edccce1a90c8bfbe590442d3523c1fb61163affa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159638 Malicious code in manda-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0d0cc6a08c3adad3e053a69c8ffafd4ef56c14d50ff1e1981a2e2f41c6f9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157778 Malicious code in kuinsu-lukoi-natiba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ba4eb472fcf69391920ce33c528fbaeaae10e9ef4de739d9dc14f75411bc2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165785 Malicious code in sau-naki-upside (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3876731e07c5c3df6ccfe1e479202ac3498085bb76c8d856de42ca80c118e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154443 Malicious code in diago-kuli-luai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 203b9ee7e82273d67a68bbc2cd33a8e2cc6825f69f9feee62469c9ed4ed00b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153656 Malicious code in billa-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87884553c12cff353be878899d93e9d82a22ceb1c8f0090c9519644a36df89f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150609 Malicious code in @miptaa02/falak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de7630c2b5cc60ddc1e511bdc8214a4222fc13bbc67405092816785a9700b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158008 Malicious code in layla-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8e49301af45a1ca4718b2032683688e969e7f4eec4653b5abfa847036dbbc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143734

Malicious code in nabuf-otomabin-nojaggu npm...

Malicious code in gifa-otau-uasuagffdfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335086b4158849f8b2c3bb983978362c3e70fd6838d094b4c6c90548f1fda471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-148722

Malicious code in tealove-aruma34 npm...

Malicious code in nokire-sekiya37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410af9a6f3a201bb164af56317fa75f0d947f866233a97bc3da58f2436adf99a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguof-dusui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cbec3e9e363edf830cff77f8b0fe40340aa7e6d8c97884519f109ec0e80f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/husada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b109c651e524c5b105d85798f362d052e5604037f9a592ede2beba8f979fd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bdee9a3265e5e25f6daeb8dfc83831b8f193881a5d1185fe165d3c87b0e8085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...