Malicious code in kiudt-acog-efag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15715e6d12da8b731f4ac7a6c19565d9cb1536148d7bfc41366c218f72e8972b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-aggrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d934b529a34fab097759ca2edca5718a4a269e985d3338c92d84fe51d01b8ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037fe299eddac5e596eb43434e60ab3e6d0f2945568b168031ce7875fb033ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb983febd18968a8597732bf01c611ca293ca69c6a38ec0b596c88fa6ef2550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cuwabimoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68818273ebdb2c89b95a10eebb9b52042a4c8700947e50b1dc0dca65d684f3cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fngdye (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62e39dd2564555e35e1d955359b930c2f77712a2684fa5e1d2b9c91e1242ce9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-ciaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecab233a9c866d7a138312e36bd54cdeed67333efe80eadeb697dc50e0b47caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137878

Malicious code in flights-tuig-ala npm...

Malicious code in kisut-diufg-diguafuavaoatav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3135752c986bb42b3833f73afd859cb408cf86fc23f8b5804774d0c40a871303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-gistsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 580c2a19d202109998de5c16fd76146b3dd4f2bc3d42ecdeaf88ab9cbae66e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsgustduet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2544e9734a5d4be31355237278167e1daec4bca54503875bff6fbfe3fed73d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146f9d9b58c878ccd462a8ff4596ae93b48ac14e046474fe45627d807a2e52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a22daf8ba9e34415b5f0086e2fcea39a798167e67872cf4b13af28953f23ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ede95fa3916d8b19e682be7e20dd67b64c765e5b0ac91069263976a2dd17105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitilok-don-olia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73934e7962713dec8d47e6def4c909b16708a6c397fd7face2a370680bff03e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolibayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b7358f02fdd1e3be680cf0861d22c48f80a2b801b6c93fbcebafc2ab8cfddcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8e18f38edbba8b29d881ed50330de5f917b458ceff9378ee7ba9cf48ac9e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcuadopav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcde3f50a15add27a8e2cede88742122bc6e6201c6542abbefc8f1830b5f59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cimoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ecc9880b9618bd6bf5e7b048665bf08206705b549143215e0c615be7e12a311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184566 Malicious code in odasv-kinu-bb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dacbd814946a33bb80e12a47d49996c4c85dc6c3597f983e1e047dbb9a39b387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...