Malicious code in kupaio-kulaa-jiaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45dbe7dd55728fa7b7b68f43562e1edcc6f40a7bec015634ed3f40e78a099513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-sjdasdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9569f3083d09e4b4f82817a3f50779c3dd979da9c31fc27bcb454a67df40afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipmofa-hfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54af6c9ccc732ed3a391e7e83fd1747c41622f93e342983617719b1684eb64d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miusan-nabja-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b6e9fa20568de0900010428502fbb389b660b14a2d64ac8ccd8c67d3c1b8035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satagi-anjifangaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7ddd5d3be818ac88bfbcbbf1c06d8ec0b0ca1f05f3ec3387568bddab099c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d343cd40b4e595bd395b4c6000c711ab4fd4e7ba8e1155cd3cf7e8aff66367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaguh-han (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b90568b04861f412989ae16400d545c10bd5cc0b87baeb2269ee1959ec6519c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusia-nubaftutai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0761293b6420ba5700aada94de37d94928987820fb0676a336eda1d71a0faffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboah-agafagsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd690c42a8a5ec09122eb1bc85760ebcff2a7b6e4b9331f074ff416e03d1287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbedbc6b3a8dcd11b9ce587143d8b15009bc71c2aaf7f0f4c631c6a88de5e11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-naiman9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3fd3deaa2d95ce6183d65ddb6f427aa8c984eb96b7c230b37e735a4c216ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musan-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56118d9735bd9ede953681e42063a7830547ab78976e460e98660b7e84224f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-men (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab21a825a364e8c752b1976ea0343c29e469e0c8fc042f9e8919a465c2fcf006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9fed38df503030261b51a536032acfa3392c358ac29c08936c1a3f0bc0c534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b151e3fc0dd80288b8de473e5a0599a030deaad63388a92b7ffb9895f07db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kil-jakai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d463812c25fed8f96487cc91d6d058989f8b9a6bfe2c533363ff8c688884343c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jalalkioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922b9ad0201abb81f89fde88bf3390fbbd34206ec163e2da8337ce6ab4687024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140198

Malicious code in miftah-miftah2 npm...

Malicious code in buta-fadsg-vfsfgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3919c8e29ba9bf882553d2e0cb7269f827308da1ac250be1ace3123576a8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mnaf-saif-cagus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7cd7e575d33038661bd15fdd899b471cfc1cc1dfa0c40f25264d792acf06d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...