Malicious code in sugoodaini-ngasa-abai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e039e295fa2cc30361b6897e8a5b202e467b0acfe121ed48b5c2982d20d9fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kullaa-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb55ccf7bf669ba76fddd49d13911312f0ddeeef28ef87d50ec1479b5014336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaiso-ola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab2efee687b5334debc51f08e434fa82615b72fec135d1f6f450d53db3c5cc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-vss-budhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a191520502165f78b7c8dfe2036692d37bcde142a9e3a571f572a3230ec99611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-favi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11db732c9ed66eb42f056e41032575dbdf7e2d0108251f7eedf178404bc3ad85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudufui-fadabida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0abb9835d99545b9dfe1933ba6b48c0f7c5f17c6ed0783f470dbd6ce0b64c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satg-iufaaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece8372b0381b6bd7fef0f9ef492e97641056884ad92639a12b74933a6837a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tusintabi-ivaaduna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e002a74d6ecb227ea5ae1c06db2234aa1cc6a6b4fe1cf720031f40524828ade3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudfui-fadoribafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bb06e2b2adb6076fed137e4ae78fc0f65a0570cecfba9a0be7e8ee2a6bdd59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satmf-anujafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0d5caebf6adae65dfe63111d6274a234f00e897ff6ff7f7b2460c5651d771b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afhfia-gaifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8ab4aec6b6fb82f907eb53ffdfbf5add6d4c1875ccb94cae0410c39340b59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-nuta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95215b0c8393bc4e9eed7d28309b099276391bd2465f27f426bff01a95b785d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agdaigoag-agahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a7a7e8657d6960fac232ccea56908cb0d836d057f8cbf8269f377dc16ea9cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauahur-sofi-dosh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e662cb758445a13e3247b3e58537f3e802ebf5c29f80fb06697c864ba95dba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-ditofuaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ad88d737dbf068cb007409e666d796cf39a1c04ef555d190505733f8c04377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a05b39bb4a2c4dbe9b4650f9f0c8c0fafe9e842f3b124928f61fff9b6b52e48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874734288fd33307686d92c862dbf2db92bf6c3b2750924c38811e5b8c87bd19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143633

Malicious code in aaku-lia-tea npm...

Malicious code in godi-tua-in0dtdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c86f2729f64e618a5238a55aa7ed18d00fcbc56490948b8f0bd9fd163edc6f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soffgdi-ugaafaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c60379a9414edf62594adf3c7888071e04521a14f249f4d358a4076932f2fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...