MAL-2025-164328 Malicious code in pitra-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3dda8ea565fce5796a421a5177d325432cc8cf6d32727b882a3b8aa9c3f9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155055 Malicious code in fauzi-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc35e0685718a9c9bf563babd07819a0f2380037e21812480f4357f080aaec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153656 Malicious code in billa-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87884553c12cff353be878899d93e9d82a22ceb1c8f0090c9519644a36df89f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166247 Malicious code in sunden-diak-itarukinyukia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e2ec17baaa8f02e262a4dd450b142cbb38ad4bc1215657101bd8561be48f8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150133 Malicious code in @mipta1/miftahrepo19repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9f522be329fba94d87d3ca5bee8c71211363da535b99030bde29cfc7df6c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153408 Malicious code in avminh-afgais-fodafahog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0b630b45155dd3919aa0bda140d6233137a4afd6b181a8f4e874613dd5b2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avbai-abunahia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b007546fe82f32c3ed3b08594c587b9ecf8f4440796daa00838ef2efa91f1e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad48745449c42b148f5c962f319e4b4b70928879fa1a5c594a7372aa2d9586c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mundya-misptasa-riad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c884a939adf86ee837e37bc07ab3ef9d4b159b275d0a44ad96899860fdbacd94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ntda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fbc06ed58c7cb2cb0907c6c6803b3423b9ecec3a52b64a09fd2124728b9637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiri-agomoio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0285d3fba14cdbd1d171124a1039ecd40ca758cef6cb3500079be4e423117f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154978 Malicious code in fadila-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076a4559c0a445b708b569907290cb867b8a3a2ac776a6b4e98a9390dcd93bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-zenobia-hugo-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9c0bbfdb2f4db105e962a12099bc5ed6eacdad8927eaeb93adf91598749009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-janus-perseus-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855c73910470153009c55832fa0f949acbc8e0ef531bbd95b957e53c22ecef18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-mysql-bellatrix-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bad8ead92b1bfb381b56cccc2105b1947b8cd2bdc46a1e6b12690cf923b0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114399

Malicious code in dotenv-parse-variables-cache-halley-commitlint-config-angular npm...

Malicious code in izar-transport-transport-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618328e12b0ff637ceb1688683a924234b65fbda44e8fcb3c6a3ad3647166f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-phoenix-altair-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56358002f8c5f94fc9121e5c7eed6f83e3b6ae720afe694721b04db71840074b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-ignite-ganymede-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14437d0aefae1e385cdcb8120bc09283f513bed896c77b0dbe800c278ed0f2d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-async-readable-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35c33f05d6aa52a43157130c15b3cb8b2935e68f7399cff7af2477785e2453d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...