MAL-2025-181119 Malicious code in teate-thy-sonic-wutlu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b9afa5b8cafe466c49cf7ea5557ed4cabf946426c1c9132ca6af7c46570446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179859 Malicious code in lookingan-jaja8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1b94bce2e9b69fcccbfd0edd4f204a30a868fe9b65b0793edcfd15f35e0e9c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143248

Malicious code in anneh-putri-tea npm...

EUVD-2025-136406

Malicious code in sayaa-salwa-tea npm...

Malicious code in buis-suninana-mao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8756fd26bf8c68dd8a692a16cb1ac7f3da0994bf78b9c0e9f9752595e39d29b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403471f62df2bb68d87de04ae3974ac41f0bea7efc3a160deafc5d73636b6e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-kokaialiaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670574322d748af1f60ce7b229968c40a5c371ea23895a0a6db6bef967356dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-radatia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234cf9f033034af20aefcf400da7804876fa7694e40ef35336a1f017875e44ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143597

Malicious code in abtengggg-putri-tea npm...

Malicious code in hitachi-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3def7c7e588ae281b5f744590332d1495f72a95ac132ccc0cf824f43b81ff42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in god-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71ab4e0cffcabf959b0ae0cbd537e610b97dad9d30a00de905972d99cd0a7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e0ab6cbbe088003eacd39f6b9c6c1f9787a3d95023e1a9a6d449ed38108f45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143579

Malicious code in affffri-zidan-tea npm...

Malicious code in diva-tutabi-ivabagau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aecf157c5fbe3411215727f64f2022a8256fca115e02de8dcdbe35bd9368b824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-buyaitatar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce73e87bef04e0d94ceb10b6909c4d54b6e046f8a818663fb8d740414849e85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iuzp-pert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88117e5bf4a2e675779ded5877783abcd3eda364b0f468796307d8868c75160a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-bai-imbufabamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8fd6d04a994a49c1f34416f11d8ceede1cabd979563c463a9afc4e320bce74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136998

Malicious code in rramadan-zidan-tea npm...

Malicious code in mahiyaa-sutiayanu-ganofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7875e917b80f15d55fad5112d285f68934a6523ba0e69a3f04666c30cb1b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satu-angifafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e43d7ee49599817a92afede2c21da2e44a3ef9e6b09ab08b58ad5e9335d96b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...