Malicious code in digo-kaimi-aiokoalamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1f998b5fca7e60589a2deb8e395f0e34a0f768949734cfec00afa4692ace05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7420db2f78a90c383a502b9d4fd97ad41e620286971191e76af0c2aaa7213223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaism-liamiaor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeaad80d26784bf8a7076d83fced13ce68e387d7c306469e38d6d233158118a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsbers-burtd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62cae108d8a2913ed96327d6e1cd6e46d6eab995df655774bb25460ec5d6183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iuzp-pert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88117e5bf4a2e675779ded5877783abcd3eda364b0f468796307d8868c75160a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e782a1a27764ffbdcb682fe3c7f6ec286f6083eacd5609220b50a5823b99623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapio-samunu-mumadadbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10aabd5154fd659f12465690bca50608a4f0e53fc03fe61aea0bf6a9f0fe32f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akuu-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505ba3d42582882cba3894ff7ac722a7f0383565ebb1645be98dff2c09893f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73235b3f77383261465dabdffc458ddbed053f10bf5061af278ac0524591152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afrii-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ac4124d936f2676faf3a415877f38467566ed08ebea87669ad26a8b63dfdee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-sjdasdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9569f3083d09e4b4f82817a3f50779c3dd979da9c31fc27bcb454a67df40afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e788fecf5ab547f5f7d3891fdaaaacb46a6e87f85c9cdaf040bf0aa4a091c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manis-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c11d2a68b6dd164c99202cdb6ef7f2185da8db298fc9bcab3f7854e74f55cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kil-jakai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d463812c25fed8f96487cc91d6d058989f8b9a6bfe2c533363ff8c688884343c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-dugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78a90b7ef3abd6ab136b7b3ee97c045d8122f8ea6ce6c849caf66d4bb0491ba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-giub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c473c59a1f7fe88e9966f6a6912de7d4aa88a34c46656abf36955ade0417d40a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98fc82fa3cdb6b849edaaa20d848c18c3b93c9da83efedabdf0998930a7a8643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tresfd-teadteh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eca7cbbb7c275d5515b76890a9fdc3c7324ca937d7f1ff951d5c1e7af911aec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140198

Malicious code in miftah-miftah2 npm...

Malicious code in buta-fadsg-vfsfgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3919c8e29ba9bf882553d2e0cb7269f827308da1ac250be1ace3123576a8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...