Malicious code in nokire-kushina40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ffaeaf67256d3665e2c948e2037a5ab3f7bc9d18cff28899f9216d5544597f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satsgamf-anuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4eb5e4f536f158747fac22295ecf541380fa465f5422872fe7e94ff57089b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jokiohakaikimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06dc097aff1e3041c00433fcc41e359b8aa6641e9532d43f01083d33a9740f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonnf-aboia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3d006ef8192eab8a95114babb381a3764b7f63f5ee050bd469bd43a4e55be4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-bsoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c66c31e82cb4d4996b61fb7837307e555ab32197c7ea418dae90afafa92fb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440486628efcb099562dee61bde40f559f662d012ed61572abbcc25503ed16cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauahur-sofi-dosauapuih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bed0244b75f0cd8dc4e2540178a348d48cf879ddf364a308005639649ea1663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-farvadvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d9eec3c8383412bad75c82dfea73ac69790d96b0ea5bc2a6438d1b569950e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afsfafi-daafiagfif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc393b55007d5a5a95eeba455f3219c4a8758587fa30fc48d53beb36f8973e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jalakioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0eb7a97de83989093a4c7cc12611283010cc6a28f692983058a26fa6579d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butah-asfui-dufaufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24cd437c9842cbc2a6c71f438703dbeca093936f5e82d1640ed590b2023f9687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136489

Malicious code in sahunim-satudfui-fadafa npm...

Malicious code in nuilva-daerde-oagffalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b14ed0ff278f9adae2cb0130aa5ab3509aeef17da660d79b73e884721db8af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sangunu-nutg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00321c0118ea1ecf3792920e7122a3350b710b593b319402f68d733f960b3f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmiam-ravfonasiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccc7d763692868fb4c851c16f787500525ceeefa4fce8ee86b0f243d1a7e8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140302

Malicious code in manadsi-saduda-miada npm...

Malicious code in anita-manuat-ma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31eded59ea6b6bd82960c1d29d663ccdd320e60d4379361bca391cd7cb0b3d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manis-miap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c171d7dd58270efa6b80a1c3aadae66e861c7965e6916d9eac5e9dbf03d307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-minuday-nartipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae2d90a9ec029788e14ca434084304078f74ae5fe993ef6a1d29367bff06b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4e6270dac29a8f84fa31daf4e02e94e53f3b2af467cbf55335038b516c0347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...