Malicious code in ucok-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a0ef3a478b383b11f45744f9575e3dbfcd4018cfaa63ddad6d8e37645bae3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd100854bdabd34b1c80ed9ad88d17a31c3f64342551ff7fe49257ed6d97805b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymeria-butaper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60e87e84d455d7c107b930d1568252be59b4828e4edd8fdb838cc31da226e17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddb80018ab2f6422d051af5059ca00df705b174de2912939966c0015739829b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d7beff86eddd5a9a477b696907126110feaf9e8c93575f339668c630c9d819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-nalbalui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f33b666a15bc32a59ab94d0d59ad105631e3dec6f97d5bff4e979f1e0858919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoiman-igamoigaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43e1df098089bb3bacb65fd26f85c34723d4ed07e90fad048d16d12889dd4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-yuakdi-nurtsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f284e7f70bba7f11c21e56448c24b794877eac336997f50d0f8b4d198ec1a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d54bd140a401daafd58f237f7732674f38fef52f8cc43b7f2f54f850ff7522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alnbio-tolimasyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db4152e464a3482db35baee44976ae892479300fdaaddd8f2369a71936df3939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0df05fa5e11190477b33eb6ed24426437898ba498bbdeeeffd8d7ce17500f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8d64b3841315713d4be4dd4253771ff3abebc1aded8d916054d5e0941ebaf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146487

Malicious code in verify-aya-amili npm...

Malicious code in teagood-sukuna13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2052eaf7f9eebf8039f76700df6e6a5702a632747b9b84d468d34189f64196b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4909e97a9b2ffb1fcfaaea7df09c6f7df2278e1b199278fc5d7ac88241cec4c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe9d3852875eb4062784b3a22f795cc6718e306c63de24540b951d3eb99d064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulpo-kai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998e5917bbc84c630710848c8cd66519d29fc2104f523c41bb35a501fc27375f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokiraifine-asa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920ceb9e1af3212f1e43692cc10e81f23d8020df58c2321389aa0422bfd20c96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aku-idusanlaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c86c22ccc26835b3dd3d5930cd065fffc4453d1891e786a6e707e94e41546f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d18892b3a203bcf7ad7bcc3c0a3f2b0ed0d13b90bad6abe117568f3be4a1d45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...