Malicious code in nudela-ofgaf-gaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9c82c6ac670ac8545f78e1599bdb75e847930e8a5ecd64f692a0d4baed139c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulp-kabook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba7160e30cf8d02df03a591afd3505f732246bc44f4586cf1c171b35f6f19f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaisis-pafi-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f145101f1937371294eb81a4b6c5c6079c7bd0dc96733bb0e72995de0a554c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0844b1290bcd3eb9e6adbad66a7451204b87613a59595c60d119fa7bc9c582a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-lukzi-iluzou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887342f458259c62a98b841ce0f63136b456a19cc7f01e4aabd0522770eef284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-mutafafgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e0e4603a17e59ba2c00409592f8c9bfcae7a980be984655db4d0087f1de0ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-unianusiakpmau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4367517dce045cd2bc001c1c8af37c1b3c9ff2d73108541fad7cf2da15e6fe63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lukta-joalbiokai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851cf2d36f0727092d2b8bb4d7f07605cb833abee7bcd018b7dfaaa867bbe0ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-min-buipenajaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bab6e8077ea60b4977aea30022dba0b1666c712f19c8bd9b96b11c59e3f14fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-dulaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f63b52aa9331498ace8186994623eca9e019e49dab1080f7ae0a2460f9ca286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-148722

Malicious code in tealove-aruma34 npm...

Malicious code in dian-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f3d52b1be3433610276661c2f975a7a2872427c814c8981d4956949f89edf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/husada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b109c651e524c5b105d85798f362d052e5604037f9a592ede2beba8f979fd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3eb48f1115d876202359a1aab1e89de170d2d2ed6eda6a7159d6041093b4f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4909e97a9b2ffb1fcfaaea7df09c6f7df2278e1b199278fc5d7ac88241cec4c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanun-ota-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4e62629a437b1dcbe2e0a5193c4c835c8bb3a116640125f9965b9774128377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nedarioda-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c655abebb0da065c59a0024c120f84dc728b6b0d856708af4e561dba693261bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojausggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7587c529ad59d87468cf93154afc828dffdd97cdf2d8d54cc158eb3e2348bdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedarnan-nut-budipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4864b55573d5ca384cf229736eb5ebf87e67f1bbe814c3ef713d07118ed63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tear-sdas-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06592ce6521368e96a3555daaff61a284130165ba775edfbcd0eaee1c228f9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...