Malicious code in nuilva-dadre-ahkaosognanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fffab8da9a9855a48d457475ed8f89ec9078d52d8ef2b776637dc61e2643d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in try-utudru-uyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc29e7e797b410307fcb9d7b24622e7c5dd74662c23754d5740d4a2fd80ae0b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manuis-boaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9baca5bc99b77b896ef5cd9725ee8c4cfb0cb3448455fcf6fbff7ee36022af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ea731cd259b54647417118f0859f7551ec258ec3dd6bb77b83c101f98352e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69dcc92fe065695726374d23e9119267b8c12aab6912c954276747e1b9dd0bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903345be3f8e1b00a46d0ded9e8c22eeed3e31c2ee55ad0296be126f566fb06c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-masidasfdage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbb45955a7aaa6ffda55cf347060a30562333d51f122a728c2d706cf0031d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e36aab34606290fddecff3199716993e2d3ca0599c2b873ce1bc499caac8073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hauli-mul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957d63d9d916beb40c91a3d9c419f1e80cb82ab563a4d520d55f905a6a276225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idagfa-ratafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f55e5fea34829863338ddd769c8ed08307237054ec6478e0a37debfa8fe6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboah-asi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba700ce33a681c45084ca34a82408d2e67783510d72fd0bc57533e049a9ef1fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fvpavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b30e6a54554ef361fb0b37454728ab259657f1f22887519d45cbbf866bab4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139395

Malicious code in nuilva-vmiam-rafoasiabsua npm...

Malicious code in inul-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403471f62df2bb68d87de04ae3974ac41f0bea7efc3a160deafc5d73636b6e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42aaaf4d009dd3e8dca0e837ddc3de626c4cd4dfe7c295ea1896da9fb413605a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-giubaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d468ad6e83267abff6b01f87166fe8b1b64ed0825a2b166f7dda6d79cc5bb828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140440

Malicious code in kupaio-ulokia-jakalokakaanaoi npm...

Malicious code in kupaio-uloka-jakali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604982791f9ec760a710025858db916eca537f1734c956442f5ebeda7d0c87f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d3667af89882d5cddb35ec8ca2aa4856afc116798e0b436c093dc3bba57dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-sdfsda-trujm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d3794316088fed8b280a215527c653020640125c5a0fec29a3215a7217eba14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...