Malicious code in polymer-datdsadsid-raadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f9dea16451b11f0920b15f0031c84321d568ba3ed30fae2a624b9c43b0b09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-mutyu-wer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37546b56a6e767f2df39fe3cf3b1de9a648e178c2dc0523c6a09810a737237f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimia-satihb-naib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ce7b681be23d288cfb89541c6c45cc14a5493f864ee8d86706a635dd7499d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutai-inauva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54eed6b8094bbcb11a10d9a667096ed4b96fba9444a62a3133e5bf1f1357f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-busrt-vae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a062ea656ad77fd0b5cf40bde1e0480cac3ae0d1710d96aeca0853dc81c04f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soi-vanunds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31c974dfea866a81716905f19367defff5bb2b6cbf0aa09bfd2e404f7329483d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiuna-gauafioifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f6daeafe0ed141c1f54050554cab38d85a81db588d033f7cc5def6608cd99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-aig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f481b76a62a821eeebeed3828a486c02609c2fc01cc477966f8cc12cb28ffc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e782a1a27764ffbdcb682fe3c7f6ec286f6083eacd5609220b50a5823b99623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-142011

Malicious code in goodaan-ngafsa-nfuagi npm...

Malicious code in kupaio-kullaa-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb55ccf7bf669ba76fddd49d13911312f0ddeeef28ef87d50ec1479b5014336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutaufa-guivoavog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607f7a6e3e61b54819b5df9a2d886c3038f3a0969b03f14a36354b881f057951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah20-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d469586b77d569657223f8c204a911583c5506d273774addaf1680edb0ec29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gafai-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 654f6dfb91b675e52ff2e211bf0b9ebdbd512ce1d7a44f7f3b5bbfdf6fbc8b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudufui-fadabida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0abb9835d99545b9dfe1933ba6b48c0f7c5f17c6ed0783f470dbd6ce0b64c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b988e67ba2cf964e468cadd89aa148131cdbf05eca57d5352f7293bf1d6bf457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tufa-iniuatida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd0919847ad76ebbfa082bbf9d9b2fd6db3e117bfbd9d522dc2c69193e117b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172919 Malicious code in anidata-hapdits-rasof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d93a46636bc632cae981e7462724e925aefbb3f470ddd68ce78de8fa958ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be38d1f789798a2a7aefd55c3ca212eba2ef60d64f2607c8c4f339cf5279e9ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-bafaaggsig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9050ed1093c1d1bf32151ded226884378a67a8ce7c8412c05ebe58e28b884b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...