Malicious code in sahunim-satudi-fadabidantu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4cc1ee447cb7b30bf1f6b53d31bcf71a4a832c18411005f546924d5c71d0ab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauahur-sofi-dosh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e662cb758445a13e3247b3e58537f3e802ebf5c29f80fb06697c864ba95dba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soaf-vaidas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f10ff86c0a98a861c218ff8b71f23da7760803401a908eca0731aa45333b34b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-toi-muyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f6fbad0904bb5515ab099c3d4d0db3b2f3c6be66d336f064c5339158eb4d5a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samnu-miva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec334fc7a0edf36d27704d209d571d063173c2200870ea941b76c3626905199f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauahur-sofi-dosaih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7126e5d7daf07b007ccd0b6e033bfd6aa972a65c769a1fe8ef8d8e9e6aae4c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236d867e4dba08ef406fd7724de84b47867a2275ffe78daed3922c112595acac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140574

Malicious code in kupaio-kia-jakafafswafofoai npm...

Malicious code in sahunim-satudfui-fadoribafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bb06e2b2adb6076fed137e4ae78fc0f65a0570cecfba9a0be7e8ee2a6bdd59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afhfia-gaifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8ab4aec6b6fb82f907eb53ffdfbf5add6d4c1875ccb94cae0410c39340b59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e36aab34606290fddecff3199716993e2d3ca0599c2b873ce1bc499caac8073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satmf-anujafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0d5caebf6adae65dfe63111d6274a234f00e897ff6ff7f7b2460c5651d771b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42830369e521d7f0231b3d6fc601af2d8956aee1e99ecea64a3100ff0d479bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-nuta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95215b0c8393bc4e9eed7d28309b099276391bd2465f27f426bff01a95b785d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-adaasaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b7008b4340dd2a2d8f60c88df085cb043382c7869672bc8d158b669eec5dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403471f62df2bb68d87de04ae3974ac41f0bea7efc3a160deafc5d73636b6e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab018d7c79499b42322d1212f90da704b9b24d679d3f280f6aa8dd717e786fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dadre-ahkaosognanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fffab8da9a9855a48d457475ed8f89ec9078d52d8ef2b776637dc61e2643d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-giubaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d468ad6e83267abff6b01f87166fe8b1b64ed0825a2b166f7dda6d79cc5bb828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42aaaf4d009dd3e8dca0e837ddc3de626c4cd4dfe7c295ea1896da9fb413605a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...