Malicious code in sonic-ks-fudvitifaaafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2821d99a6f4135602d19cb2240dd2779a6363d003730e788e1f04097d5dcf67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnygyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49fceb56cc952db27ded200a4e1c1be6277fb937e757eae6d844b8bdb6eb4602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fyejsyegf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d5edacac1b2d3c284afa3133e7650c55d579e3a2cbe8f1157da0833805b470a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afibanaivuvihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d042ef08869bf0357da7e811da4259d6dfd98fd252cd4a4796b452de7a7d47a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avo-cobsabvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a2d2c03c5f335615f12961d275f78fef75cf8fe27379c76b81b5d2d9416e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-noliu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3df62744d845f27f36c1f2021566483b119f0a95cffc5673b84f7387e01e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-don-olikaisima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db25a9206a748db26ffe96bc4695c2c53016e84d380791c9f976a610bd3f9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jyhfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f6ac4ed6fa294b92b53af7f1e0d25b2b9a867da788cef4b7aea6755263f0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoerocneaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91cfafcbed9f2bc25156cfcede740dd6b5b88901607a534d1cbd40115b2c8d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fus-ufsga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b533569f5a474ba13750a6360ef24d7366787abf35805db48ac0b42df6862e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diwf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34017876a91447b7aa3d078ecabe1c0a60a3aa0e09cfed6dca1e27ed50007b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71ea972e1e4f3a4f1ada421e9c08f37bdf0ef96b780c4e0a0f1a4b70e9e1af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137801

Malicious code in astam-ifut-daba npm...

Malicious code in item-atim-kuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3010ae6fa5ae0e9b92c452f4db374e18b87543516641377fc8adf8029ae3d3b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137906

Malicious code in astam-ift-daba npm...

EUVD-2025-138080

Malicious code in flight-iltag-zilauma npm...

Malicious code in astam-ifst-diakavgy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c69aeebce57ef1db0c7168526e70c925280626bbeda97de6ef52cb8d2fdd746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhfadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2356d9e56fb37f149f3502ff33c5c161fdbb221002b2d692a770a3dfe1b0dcf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1792c6032918c71e929242a14ab5423797cc668a94ed27075456676145e9835a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asta-alikf-dak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1076c6adb9e4b963273f652fa40a112b80c52f7cabc110568d4e9aaca49f24b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...