Malicious code in tauahur-sofi-dosauapuih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bed0244b75f0cd8dc4e2540178a348d48cf879ddf364a308005639649ea1663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440486628efcb099562dee61bde40f559f662d012ed61572abbcc25503ed16cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ffaeaf67256d3665e2c948e2037a5ab3f7bc9d18cff28899f9216d5544597f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafadi-vainafds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef59a88dc85f91f7d870aafd28370edb96c1bd1517128ccdeb84e685f133ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akeeee-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee69335802c1eafc050336ad53a5165f6519ce80537b20d4c541206e8a35935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141512

Malicious code in hokage-31 npm...

Malicious code in kupaio-uloka-jalakioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0eb7a97de83989093a4c7cc12611283010cc6a28f692983058a26fa6579d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-mem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcde3759088b77d57f90920cb6f1f816139d5c49f056cc9bb6b3cbbc8b8165e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4133c9df6e14d6c9dab9979f03b9fa0f8408b9813572cb44ccff84a2698602d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-fuafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78267d8c9a3b938f521626ab552a8281a38dce5767aa38d4f4879227b9806ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140302

Malicious code in manadsi-saduda-miada npm...

Malicious code in kupaio-ukutila-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81fd739cb8751964bc9bf647d048e4481c52ea3ebbdc76a9955c1b4a20261e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-farvadvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d9eec3c8383412bad75c82dfea73ac69790d96b0ea5bc2a6438d1b569950e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-safif-cafguis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58eadf5cc030cc3b14627f1566fbe8ea505dfa9ded682e4e61200eb4edc1d0f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-agagisihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e87e5776bc9d4a6f9625a85357f0dcc6187c19d4de7a22a109d0369329c6e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afsfafi-daafiagfif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc393b55007d5a5a95eeba455f3219c4a8758587fa30fc48d53beb36f8973e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nufuabaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5318a23f70387f3f2081152414ac260481b12a474acc6cc71298fdbb4bee733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butah-asfui-dufaufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24cd437c9842cbc2a6c71f438703dbeca093936f5e82d1640ed590b2023f9687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-gifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c65742897b306ae591e089209f952552f52a70991d9ca77b92289f38bb3be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a453f5ffbb496bb9cbf2d6635753a60ea7cb41c3c6776ce2989bdc79e32c0512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...