Malicious code in avminh-afgais-fahog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f0b30e944923e4a0fafcbe1a57366fca52018e6519880be4469422f97b6de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buysada-dair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 174f628946e4cc6aab883bbadf0eec72282709463e74052384deda938a25e5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciydua-idust-darudau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c561354e3e5848c883fa9a0fcfcd409ea6ac96534c64c6fa7a5694e62601441d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyud-vamknaiunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9796edb3e39af1aad516a7b855c32e9d4110fa6ec9b4bf7427cc103e69a8d33e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molpe- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dfd6298cb2f5b91c5d1c8fb16cc55054cda37ed1b74644a1d8cec2945bfb763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b716a989729dda077f2d52c3ee91cae1a223159d6e411de612de0ab4a9c0c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9051e2c1118ad1ea348e7ab7950685d4fdb544778e3233b071faa23eb4d8b703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgaf-dofo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea3facd54021fb0c0e1d89797d3d91b9d705ba4e7b7a686e788ee9d759eace4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fafafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5041323f2840b71d37fb68d2a7d511206d78c5bbcdab843fea98a2ed4de8823c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee9bd3aa2e1eff6a3a73654c5b3345d1e43fab7b0e201e15424abaf0440b25f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147013

Malicious code in uinsu-lis-amudakinbu npm...

Malicious code in inufgi-gotmua-anabzi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a86d1a1d56a99f74e6f080314a90c06c2fcafc8440f645a05461aeebe0bab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagimdas-dfgiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27bd6f7276043c0f986e924e58aaeab56f4e1d68f0f8a5da2ed22664dae3cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tiala-moni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5bc8961c4e4ac57bb038131a8b318c37ff384e508e2c9641a5922b381b5b963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lulio-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3748433f2a80450f9ca7c07836a291a00d022b55366bcf7f990cd345887abb2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 762c73730df31cae2b0ad32e6f5ddf7ef8d2ba079df20dcb806a1b92724e7767 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c6fe1944c66859d8caaa214874b2ecd5bc55551b5d9517a9f9392dfeafbaa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nustar-miuyu-nasr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e511ac4fa24e29a73d0d21f72bd66df53cbf6b70c3b4ec98c5de67fabd8d2a3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289d7b006366a4abf6168b2331a73c1d57dc2c13bb787a52fd02021a3dc00a8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de042d17576d8e3ac35f773729d235df24c7608cf5501e06bfddfddcac302d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...