Malicious code in poglymer-ognboah-asi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba700ce33a681c45084ca34a82408d2e67783510d72fd0bc57533e049a9ef1fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139395

Malicious code in nuilva-vmiam-rafoasiabsua npm...

Malicious code in mibasdah-manasisgad-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4b233d1bca0ca58847f26e6a5082942e1300cba334eb8935edddd954cddb92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-142545

Malicious code in butry-mutyu-waegressur npm...

EUVD-2025-140440

Malicious code in kupaio-ulokia-jakalokakaanaoi npm...

Malicious code in ksai-kaiso-ola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab2efee687b5334debc51f08e434fa82615b72fec135d1f6f450d53db3c5cc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea745f78762aab500be1e7ce22a49f88ba50db901808529f2d41efb27ad30bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-favi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11db732c9ed66eb42f056e41032575dbdf7e2d0108251f7eedf178404bc3ad85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-iadsafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3cd11f891e8951d69f0be904584cfff72b797d9a15f4e84d0a51c4e7125f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiagaiha-afafafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a86fe4dabdaaa8f16397b80c575294e21c824d648131f4e8bb219469055375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-id-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 552229e2f5e7b2dd80a5991ecce31289fd7eececa58ed576a47ff227a1659c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-massdage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2838695c79e4b4ceb231184c1e44551b99588e6d200fce795d4c74693e104a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e414bc0920a7b1727962d18e6f93944f0abadcf7ff8c8ddd13729dec02697b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdani-gagofafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df438247bf6dbd654fcbaadb3b0c18f11b3a4028d8f57971bc51ffa89d35ac9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satg-iufaaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece8372b0381b6bd7fef0f9ef492e97641056884ad92639a12b74933a6837a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143318

Malicious code in anidata-hud-mav npm...

Malicious code in try-utudru-uyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc29e7e797b410307fcb9d7b24622e7c5dd74662c23754d5740d4a2fd80ae0b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jakali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604982791f9ec760a710025858db916eca537f1734c956442f5ebeda7d0c87f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d3667af89882d5cddb35ec8ca2aa4856afc116798e0b436c093dc3bba57dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutila-jokilouana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501dd078fa9257663b83652bc8c2c44dfc688ceab89623c70492d09379e286da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...