Malicious code in anidata-haulid-muba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4226df45611ba3da53d26297bff297365bb4082eb21f69354f814af4d23c7441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buth-asfui-datajufahaguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3fa107aaca55bd63e221a0e19a10d51cae0c01ef36807b5683d58b5f9a54996 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afahof-rafgaago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7266deae07c106c5b53e407ca5b0376debc935ddb2cb70d88f17db2f29f1298d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37985fef494aa7d7d73ede3536ee7720e23777c650fea47e93c4dc8e923fb907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8a25e534532470d23c3c9fc498a7068ecfb7747f068305e3d03884cbe45a30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3a45d0ca0d783b4bfb780ad04c5e9c4188dc27cd23e3477ff34dd5ede755e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kila-jakaiaoaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4438337601bfb4ba8d43e80762fe480d9540a88d662799774769f6e8e241dcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terui-umura1-miti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84229ab956a99ae25e25a692e75ebfa562e3a13d067041595ee442e7a43114bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipmofha-hfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e227b2f360486795659b1512edb033f5bfe7ab248e096ba4e4f3d1aef99fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-massage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbcfacb325d25d05d8c6f3c77d4a7d801e7db9b993bbf8841d407d4f807eb3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140170

Malicious code in miftah-mipta19 npm...

Malicious code in polymer-ib-aad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cac35184b242cc06df46464efa4bec403d0990657ecaef3e0dfd6af3755a116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-madirfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7001c2f2e0cadda512c21d9bd93815a315f833b777ad49a9a6cc2fdcfaa8ff0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudufui-fadabidant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbd43e4d073e6afc6001e2d4cac6000c316e3b7c5ad3d5b4c41481dd13a9e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautu-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf177c882841f4892fcd87fce7b1a0c5d4771a6a27319d0d356c8a45d9240df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tua-iva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 950e6568d5434e7dfb8e985ac9069677658f5fe612de3ad45305fcc402499c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tuai-inabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8303fd0fb7c22fdb154abbbd2ab9a23d778b1516c01d50f3b5db20f237d20c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboah-agaofagsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67ae1dcfd89e8eeebc766097fc9f3ed36ce91ebd1c4cf3a700b1caf3397f9e5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaiso-olakiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091e6cf64753d224b2cbfee3ee76e9206de377a28433d561271b4dbe49d2bf4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavam-madivabunav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3838303c4066924dcd346ed83f823dd2966a3344011a7e59f043bc358bca976a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...