Malicious code in layla-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ce243bb2e70b2900e30158b9f45a7d2f047687b2a07c22b5d2f4d78b86d5e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mursai-bdurt-sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b285b395afa0339a4acbefdb72bf1b8b5013ccac5a9d6e1cb84d61973872e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2c4d0ff2d8d54ef3f17226de773ebf9479f9e12f8f54956db7a5856e6f1d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdd83fec7a5ac9d9f3e7bd1b4935789a2b738ef9ed0c543c020fba340ec2ffb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kanji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dde541c967684b89c6cc63e57c450ed3ebc4c988d0c80eeb70c5d56806c7862b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8b5618455c3eb214733087727d0a765dc2ffcaabd37b766dab36e39a9ec285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d4ae95a8d11926873e2d275e736d08c488082b88dd8924f50cc76375d0d910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b64211017de7365cb0212c41e62249b1f13b82307a513d864cf14d029d078f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f64fcab049514f8432234d49e43015af379cc3f745fbe0104774c3fd234ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/weafd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76a95cee3c1281e4831d3faca74b8c2f069a776e4b28b6af4170cc5a9e74dd64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ingi-gotvama-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab5d9794fcfc4be6d2736b9d051f07471698e108f3fdf871f3650068e82cd82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafgviala-madakfio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60499c677f68032c057c74fff9981ed1cd1422571e5b0b7c9c7a16c267e93dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147365

Malicious code in uafagarug-midufafoi-sut npm...

Malicious code in bintang-tea45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d997d4005364b9f4c92a2fe1f98d1d491303866d09ef65bcd04712a6b66994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-nuys-nwb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d76b676065f30719f078b18bb6a0d952ddbd8e82157d11e675155a8b9db9a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b299852d53d9fa7c83fcc61f5c0d75e06e7f5d9f18739976ec0ab4c2aca7a333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gfozsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa184be970060ffb77903c0f1454a0f71f3db08879ad2720b54df62962e623df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bb97b5f0e3c4d722d5b0418b070b72fb62915d76abd0576f26cef8014226f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a8aaa71d5f6912362009bb4c78ceea11e7044f07dc7ff4671c541e2cb9f9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muny-boph-nutrui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd314bf5337c96a95c8023cf132e395957e6a691e8cdaf87a810d6dc9921378e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...