Malicious code in sonic-kuloig-timeseyaxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a6308c15f251413654e01436e64a72a9ddeec67a68e276fe0cca2ac5c8aed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ai-avuhusiaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f6455840f2464ef30d292a58254401350d08748a1bd05c8670ca3b70c9d4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agg-iguqakuraduidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a7d13ce843aa7f030274cef8c837093afb41ba64c298cc675d96117b403183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmuulltryfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac111cb195d14f32a89b39cd37078e53b3898475c1278c38c489a653e39944c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d62f2398b0e91d39071d20a1700542e17681b655a78ec4ffb8e77b249f6ea93b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dalimianunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f58b5ff7a371511f4fed1f1a61974aff2a1a7de1949a50315c376178f303010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1630dd4503bd45c8b3b826db1ec4e25f92cfe8d0cb4f502c085636432fe2baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oga-inmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1774b6c8ae2a446d958943a0403fad7685692c18b0cd7982ee99fe932411d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40f88bdae107f6b9405243475b97807fe4f3518c565f6318e65e55f972d94012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hifdagujbagaifah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb462c66586c367e7fe5639a99621f4a69a8df103a5401bc440e572579a809d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-cb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ff4ce23199c1c4dc73fcdf6c53631fac94ae693b26976a71f615ea23f31562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olios-nol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb6e02602305b959db484744888e172ec95a514459c34dafae019f7b429f5366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliutka-tamonaiki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e1014847667277f938cb75a41d32b8afcd7c9d8dfacdc993fcc4ff3c8950e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-ca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9554c772099d717b378fb262f85e1c6f3c3b18838b2a1e79b4f2fb00b3d19221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafufunb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1e740cc80f03476474c2992128702a82fab795f02dd97c7f89e09519374113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137731

Malicious code in avang-oliutka-tabar npm...

Malicious code in liobc-ug-aag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d1eff92455378f34d0e5e4541bc3992cba06772b6bcc31bf716ea2d60eea57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tifffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0caf3184bb437b8a797b85f0fa626b76271b47cb60b138f087dd24fa586192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c9723c2da97b6e73ed98c719d6aee10578864fcafd6f9fec820130b6623e0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahvfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c871235e4abad00191fcae3c240fc0421804b1f99ed7e4bdf10de275f2060ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...