Malicious code in polymer-gigsb-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4204437d26faa4360441b06e58b022cd53b658b1a0959c0494d54f3589e6fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b439ec9e13dda10890f4cf1f15feb7a2c9c43abf87bd17127d7029c22d800e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idagfa-ratafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f55e5fea34829863338ddd769c8ed08307237054ec6478e0a37debfa8fe6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136489

Malicious code in sahunim-satudfui-fadafa npm...

EUVD-2025-140691

Malicious code in ksai-kais-ahakaoliaaji npm...

Malicious code in kapvino-socvni-fuafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78267d8c9a3b938f521626ab552a8281a38dce5767aa38d4f4879227b9806ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-vss-budhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a191520502165f78b7c8dfe2036692d37bcde142a9e3a571f572a3230ec99611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140574

Malicious code in kupaio-kia-jakafafswafofoai npm...

Malicious code in kim-jiwon-mem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcde3759088b77d57f90920cb6f1f816139d5c49f056cc9bb6b3cbbc8b8165e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudufui-fadabida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0abb9835d99545b9dfe1933ba6b48c0f7c5f17c6ed0783f470dbd6ce0b64c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samnvu-ubdvabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5bb16116d64f43d69c2d674feb87a9f32b0351db6c4423c578043de0ecf217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178034 Malicious code in polymer-ibhghhssabo-sgahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5fc7ba39df629d856c61192ca7c1d26c102a458212f454e155ce5ea23e51e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-fari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c4ac0630e581dbdbac200b6893ea64dc9595ffd0f2ebf1dbcc54c119014de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-afofafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa77974690ce84b18547b1e266d307bd382a3932f36569d53bde2d77f2aa493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3c2ecd7c8be18928aab0807b85d0bed3472ec3cdd85f44bd79afda68abba84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403471f62df2bb68d87de04ae3974ac41f0bea7efc3a160deafc5d73636b6e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141512

Malicious code in hokage-31 npm...

Malicious code in hitachi-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b90334e7c4e59372f4fa1e7ff350940e71b04b2b22b098683df5f48c195795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daarde-fagafiafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82b7b2a1a8e1277d9e1c511cb6b627c36367683228c82839ca71e7935a0d029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a1687af3e543d17faa954e230a96768b5d6f14e0c6f5696d958dc9b3670120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...