Malicious code in polymer-sdfsda-trujm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d3794316088fed8b280a215527c653020640125c5a0fec29a3215a7217eba14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236d867e4dba08ef406fd7724de84b47867a2275ffe78daed3922c112595acac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudfui-fadbafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094c3e177a68a39ef12260ff947924cea85995bbfde6f28945c617276e0b2731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea745f78762aab500be1e7ce22a49f88ba50db901808529f2d41efb27ad30bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-adaasaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b7008b4340dd2a2d8f60c88df085cb043382c7869672bc8d158b669eec5dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b79b9643d226897aef4ce09471ccb6bb39070ae8e329284a93aca48f33b4a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mubafi-sunai-caai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8967ea3c427e48ddd0b785fb697841f0d922c88a779a9e5c7e0db316dc22e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137579

Malicious code in polymer-ibhgssbo-sgahsdi npm...

EUVD-2025-140448

Malicious code in kupaio-ulokia-jakafofoai npm...

EUVD-2025-142545

Malicious code in butry-mutyu-waegressur npm...

Malicious code in mibasdah-manasisgad-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4b233d1bca0ca58847f26e6a5082942e1300cba334eb8935edddd954cddb92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soaf-vaidas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f10ff86c0a98a861c218ff8b71f23da7760803401a908eca0731aa45333b34b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143318

Malicious code in anidata-hud-mav npm...

Malicious code in sahunim-satudi-fadabidantu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4cc1ee447cb7b30bf1f6b53d31bcf71a4a832c18411005f546924d5c71d0ab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauahur-sofi-dosaih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7126e5d7daf07b007ccd0b6e033bfd6aa972a65c769a1fe8ef8d8e9e6aae4c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutila-jokilouana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501dd078fa9257663b83652bc8c2c44dfc688ceab89623c70492d09379e286da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaghuagaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b3912ba0f3f0f03c2a758f9a65d111f99558a75cb7214ecdb66a1dc492be1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a1687af3e543d17faa954e230a96768b5d6f14e0c6f5696d958dc9b3670120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samunu-maiavava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6ce03a5c81f997945d65199444f99af797befaff4cc4d2d325db0fbcded6ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-toi-muyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f6fbad0904bb5515ab099c3d4d0db3b2f3c6be66d336f064c5339158eb4d5a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...