Malicious code in godi-tufam-iunu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f25e7b2d1102044b8522042d555395dffd16eee73d0e1f1e4afe21adb34b335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tufa-iniuatida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd0919847ad76ebbfa082bbf9d9b2fd6db3e117bfbd9d522dc2c69193e117b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9bfa6dab4dda6d005504aeb4376521adb6d4286f4040bc59c09aceb04f4ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 578db9919c26e8ac0c995e586ad4f10f64f3128b4897025b1c347d3d8ec7143f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soi-vanunds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31c974dfea866a81716905f19367defff5bb2b6cbf0aa09bfd2e404f7329483d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daarde-giddafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5550e40fd505cce4b6db1c536efb66281a7a48907b97a5c56ac63d35933078c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutaufia-dagiagug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fabba1423f99198d45e85d5a1aef599593b527650a0288d0d7e8ac4d268e721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuramagi-sutafia-dagufuatag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8a1ccf4f9e6a36b71ec307fdfc71600335b6846c9a1502980b988bbcc4a5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adair-biurn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd97e3103a2bf5971ae1faff53f7b158931a8c32ea29694728d4e248671d4e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adar-bid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddc033f45f3c39470160976babfe318f41fc9170bd4653ee62d3b7db752a834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-radat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8c866265dcf3d1ba48879ad244df3154afff2e835f95f4be997a019917ac15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibga-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c465648a55ed6a25186807c0904850572dffbc38bfd2b89ed4387a6aa9d3ae50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodain-sanvgaunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d3ae7e37f89dc4de1c1f358b4fbd2856de89c9de6fd8fb57d089d68bafee18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-diharuray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb7f0d470482cbf516f37987222d7f2cb4aa32a2607f1b48234240686a6a50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satgb-naiguab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22f78adc8fde737dbeb5e5318dd5d007062fb10430bd8c9e4b8e7ccc98adeed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6738e894f79b0190cd778b9807237bdc8f3f34af884723f89b4e560849a13c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-142843

Malicious code in buta-fiuaoofoana-inafa npm...

Malicious code in butanaih-afusfafi-dauafiaaagfif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f01f39a1acef57499cab8ae8f223c58bff09d944d3ac6ed71900410f7e850c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-yust-mutrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c354d363e528a8e8a70ea61821238174036635f2347ce19522e8cbed11b42077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfadsid-ragadafadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285768ba1e02fe80f9498fa03aaf026ae96add312bf14b408194ab141f1fe99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...