Malicious code in kapvino-soni-farvadvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d9eec3c8383412bad75c82dfea73ac69790d96b0ea5bc2a6438d1b569950e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4e6270dac29a8f84fa31daf4e02e94e53f3b2af467cbf55335038b516c0347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-mem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcde3759088b77d57f90920cb6f1f816139d5c49f056cc9bb6b3cbbc8b8165e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141512

Malicious code in hokage-31 npm...

Malicious code in nuilva-bavia-munvda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38f10557933c09c94195b2470a7b0be5142383d678aa2aa087e522fbc7410c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-afofafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa77974690ce84b18547b1e266d307bd382a3932f36569d53bde2d77f2aa493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172857 Malicious code in anak-jalanan-mdn47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a297e0df8279fc09bebaee521bfec9ec4cc28aa98eb93e9c8e827c8a9158e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179269 Malicious code in try-utudru-nudy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6853ac4f853d38287e282ea9cf3c5a7ff174f9e7f45d3c2d72b6c694a3fcf9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174403 Malicious code in goodafiun-tufa-fgifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b2d707a0765f5cbbc9c8655b02c96bb99497570fa988d2e676cd0d0647fbd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174375 Malicious code in goodafin-nuiyag-gifatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd2b308826e680ca5bdd475c811dea831814b8f24fee3decc0496d2b10d7f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172899 Malicious code in anidata-hadis-mamaadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e08ee131c6f1708789f54007f7d9b23a11d3ac4b05299fa42e5fdc4669de1bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174226 Malicious code in goditu-tuamva-dibud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3dd4d18f787ac64367fe6a36d936efd11ac679e074dadb1a4d39584adb8897d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176243 Malicious code in musan-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56118d9735bd9ede953681e42063a7830547ab78976e460e98660b7e84224f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoafifa-abohoahdfadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5e8214d0889092d8b46662cd7760efa030eb37af2f94686226839d0582c994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutu-gaaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3458ac9421392a568a4fb33c9151f595bf0352c24f70e36e53dd1b098eceddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140691

Malicious code in ksai-kais-ahakaoliaaji npm...

Malicious code in kapvino-soni-fari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c4ac0630e581dbdbac200b6893ea64dc9595ffd0f2ebf1dbcc54c119014de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satigigof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f88e58b45d0705dd79a88727676ed55b6ed4bc65205da3bac8673b48d5b959c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178282 Malicious code in rintono-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c7b5ec150ddb4446ffc4f39c57e32680e9e8d36e9eece90ca45dbca0dc328b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175810 Malicious code in kupaio-ulokia- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8812e28fa4c2f11eeb75cba960cf3eb2fe74a44780ba4e5552a376d54ec0b87b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...