Malicious code in kim-jiwon-men (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab21a825a364e8c752b1976ea0343c29e469e0c8fc042f9e8919a465c2fcf006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaism-liamiaor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeaad80d26784bf8a7076d83fced13ce68e387d7c306469e38d6d233158118a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsbers-burtd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62cae108d8a2913ed96327d6e1cd6e46d6eab995df655774bb25460ec5d6183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboah-agafagsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd690c42a8a5ec09122eb1bc85760ebcff2a7b6e4b9331f074ff416e03d1287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9fed38df503030261b51a536032acfa3392c358ac29c08936c1a3f0bc0c534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iuzp-pert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88117e5bf4a2e675779ded5877783abcd3eda364b0f468796307d8868c75160a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-nffama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726fae350979df4a4968621991d03d3d6c0fa4899c4973a6575070afad3f1121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e782a1a27764ffbdcb682fe3c7f6ec286f6083eacd5609220b50a5823b99623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176054 Malicious code in miftah-miftah1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12cb3fc65310dbfe3f4cd20ae266000d8391b6d2fabc15a449a2cac6f5c7c5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174334 Malicious code in goodafin-nui-gibafayfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1fe690259e363c19602c4735a54c7d9f2299fa9e872ad4e9bd8a2991901cdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173641 Malicious code in butanaih-asfafi-dauaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8ce815577b2b8b6b2b2e8749410ed4a618fac5d8399d2bd5634a282b02b456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177855 Malicious code in polymer-avof-agifiafadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da092aad33c970ef9e57bef12b610588cc600a429c9f4243eaeba96e437876ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178526 Malicious code in sahufar-satiaf-favurafan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 332f5337f87c92e5dd9db0a1a2731229c9958616050803ffeb7e8cea68c479f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173358 Malicious code in buta-fana-sadofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074bb0fe743414d08d7d9e6605a846e576c930bd565f47ee356d21e71c5422ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174595 Malicious code in haruni-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3715552786c70bec7d7d30ef6b259d84c713a12bfaacf6ce33e022dfa6c32bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-afoffi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42c84c17d59f09d3cce7caaa6323efeb5d117cd96a76cc268cac0091315d1117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-nudnif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f1207fb8dc52d423cd07d838794563caa45e69c1eef4ca3e68f35e66fd938e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140198

Malicious code in miftah-miftah2 npm...

Malicious code in buta-fadsg-vfsfgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3919c8e29ba9bf882553d2e0cb7269f827308da1ac250be1ace3123576a8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mnaf-saif-cagus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7cd7e575d33038661bd15fdd899b471cfc1cc1dfa0c40f25264d792acf06d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...