Malicious code in kupaio-ukutila-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81fd739cb8751964bc9bf647d048e4481c52ea3ebbdc76a9955c1b4a20261e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gigsb-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4204437d26faa4360441b06e58b022cd53b658b1a0959c0494d54f3589e6fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da63f5f704b0d08ef9e12097128500b87af30c873d59c4ab35e9ae479c94eb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in go-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a259407d5bee0272c1c54dec3bdf3bd9d93efd1c99ac059e22badca298543a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafadi-vainafds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef59a88dc85f91f7d870aafd28370edb96c1bd1517128ccdeb84e685f133ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdani-gagfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d2e4a05e9e0834f53fe323a087d51d2175a906e9f42f74f0ab6b709003e5f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-saaufai-daufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1ded79c4442b5431b4aacb8d19e61bb2aca236f172ecfa322be078f685de45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfadsid-dfadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad96207a9394ee1ac2ed28c57d37c2873bcd32c41f3f44d635f7c83cbec61e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139570

Malicious code in nuilva-bavam-madivabunav npm...

Malicious code in polymer-gigsggb-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dbd0e8b3b051874e6e257e11f3b95a5c979773cbee43e9b849cb912ad293360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457147ba75763bb8fe1b9025470155f1ac3bbace24bbbac57b0e0cd662b1aa90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-mas-nuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b55cd059a258dc9838d8ca6ed050c187e6618067596fd5a57a03c4de1d09d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5757997a638012ee69fac67c9206bafb9b97e16491d065dcddb9d9a143669689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7472aff56ddfb1ce95a8d5a53c20427f097992fa571d42e0bc118ea415dd024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-farirataf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 140b98856a1f3ba237937d9f0352f30a9d20b4fa73e3dede89ee57ad288530ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6248cd617bead739d3da1ac6d2b8fe6b2746add565c6ab4b9cd7604ae97419f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-ralat4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9778d17ba1789a4e7ced6d528195b47ea3b6d86a4435d6594fc6f59726c377e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-ugafaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30aee34cc5651400f9e3c40028fd578ae287da983c012c7c64c86f10f2af7a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-saufdaggafoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1abaed1996ffbed75eeb2b51183b2471e2d67d0828b709041c92507d273582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akeeee-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee69335802c1eafc050336ad53a5165f6519ce80537b20d4c541206e8a35935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...