MAL-2025-154894 Malicious code in fadila-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de9ec139e4b628d6245ef52ad2f14cf89a1251f5feb31ce1733e488bc12ebee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150170 Malicious code in @mipta1/nulll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1959d65a2292f8a74ba6daefd72e2513c39f6b99ba7309f886a75200fee9543f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162872 Malicious code in nokire-loklok20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b0af9676c19ced3467255a64d0b8ca21b77ab2e0e930c3983d5e0611ad8693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1df2624be20b8ee8126b85c74edb48a22c8b19fe664aa95f9cd75211f9d25ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ojeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52668984226d075a697ae049030177628f2e38a21c72fff4025def15fd7a3648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158146 Malicious code in lina-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3454ffa355326537152e2c8d86ea50a99c1ec17fec128303f10a01f43374f94e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tdhfla-mafgsfdgghjhghla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313a4f74e26e481785fa14edfeaaeebdf187683f6fe8bb9be8a5222252a0c5d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d4fd24f766db186fd084cfe9dbd180867c7d37086daa61d32290053ab14a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147219

Malicious code in uarg-masituhai-suf npm...

EUVD-2025-149951

Malicious code in teagood-cuekin91 npm...

EUVD-2025-149950

Malicious code in teagood-cuekin92 npm...

Malicious code in abang-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385349fe09696a89c21db68cf49ca78bbe9a97ecc18ecb7334820428a512cf82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a4c2c1f39b7c391003d20318eed1ec4d099aabde7784971fea9292d0106bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gfosd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865245e08ef95c42fd4b6349f36cf1e659691a3ffb1b9aca3d02d3f19da70dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-149050

Malicious code in teagood-sukuna100 npm...

MAL-2025-169780 Malicious code in uinsnu-lotiupomi-kilabarm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d3a603b813b196fbe9b08f9c22364fe9c42f9c9a7a8606f7e4111278eb7920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167155 Malicious code in teagood-manaki86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e41865f5d9b2efb9b7cefdd6ca13f6e5fa7d7312ee9a17131396039f0f3ccaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166589 Malicious code in syahlan-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7c235636de257d735b80ef3c63582d8fb79046505abba396be986501e72ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164356 Malicious code in poli-akilu-lunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b27b327fa653b4250c404248b3cfea580b06bea51eda4df1d9c343a374725b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163989 Malicious code in parwo-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 346b225c378f3d2a7f8db5265c91605b98a7393cceef713d22a51c31299b6023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...