Malicious code in butahu-asfaui-dufusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67be8c319bc861b87da7fa94b9c68507554c750759018fb978fb05ad27bf95be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be38d1f789798a2a7aefd55c3ca212eba2ef60d64f2607c8c4f339cf5279e9ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-bafaaggsig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9050ed1093c1d1bf32151ded226884378a67a8ce7c8412c05ebe58e28b884b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-hali-misaln (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1120acfdbe240a49704c6ddc060a43b722ba643786242bc7906d6ac4357326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmiam-raviav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37f287a621d3652da96ba813d668e9c31d6667f7d32d0c8f8a2a318f0cc14371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiva-tumva-dialu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da4e726ea384f811221808315fcd3204d87702fb07ed787e49061bc9f4956aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-id-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 552229e2f5e7b2dd80a5991ecce31289fd7eececa58ed576a47ff227a1659c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soi-vanbds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118f6b3200466c18f18b2b63eab344ffda6731da8cc614edfd3f876c42c2924b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satigoigof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71dd6c09245b21364603e267e3258505570b6247d9d8fb66675e3820e793af5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annnneh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08cf0fe4cb167f08e96e2edd0a9627573d40d2ee2dbcd784688c767529ceeaab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibga-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c465648a55ed6a25186807c0904850572dffbc38bfd2b89ed4387a6aa9d3ae50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-134998

Malicious code in zaskia-poke14 npm...

Malicious code in kapvino-sofgdi-gaogfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba14fe272be5aacbdd53b38a43f40a3e0649cd5b81386cef52d28d4774b801b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426157b02f97f1d5957632904c226e5fe63f26142f598d4ed5a9774b439b429f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-brdia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870a3422c44565054bda1461a5871b05632650ad3e87037c68415ccf367e8ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f8aeb8d6a8c0643c3f19c3b9458fb53189fc9b0f2fb13385e3fb295a606ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174290 Malicious code in goodaan-ngafsa-nfuabaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43a485b2da2542e11c8da2bd046ada6376e47b6f97217a8bf0d463303e6942d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176470 Malicious code in nokire-nakaocil15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e359e4a021a17ccf9bbbd89f76bad026ff8b04a7c6d0661ffa8c4121c962259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179113 Malicious code in thambi-vsbers-burtd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62cae108d8a2913ed96327d6e1cd6e46d6eab995df655774bb25460ec5d6183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175861 Malicious code in lia-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9491b5ce9874eac4f7e7f194f1aec23731569b255cfa7a3a10b7ea37afc5bfc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...