Malicious code in tauahur-sofi-dosaih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7126e5d7daf07b007ccd0b6e033bfd6aa972a65c769a1fe8ef8d8e9e6aae4c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-vss-budhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a191520502165f78b7c8dfe2036692d37bcde142a9e3a571f572a3230ec99611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-toi-muyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f6fbad0904bb5515ab099c3d4d0db3b2f3c6be66d336f064c5339158eb4d5a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903345be3f8e1b00a46d0ded9e8c22eeed3e31c2ee55ad0296be126f566fb06c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea745f78762aab500be1e7ce22a49f88ba50db901808529f2d41efb27ad30bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tua-in0dtdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c86f2729f64e618a5238a55aa7ed18d00fcbc56490948b8f0bd9fd163edc6f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-masidasfdage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbb45955a7aaa6ffda55cf347060a30562333d51f122a728c2d706cf0031d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a05b39bb4a2c4dbe9b4650f9f0c8c0fafe9e842f3b124928f61fff9b6b52e48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874734288fd33307686d92c862dbf2db92bf6c3b2750924c38811e5b8c87bd19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143633

Malicious code in aaku-lia-tea npm...

Malicious code in kapvino-soffgdi-ugaafaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c60379a9414edf62594adf3c7888071e04521a14f249f4d358a4076932f2fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kullaa-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb55ccf7bf669ba76fddd49d13911312f0ddeeef28ef87d50ec1479b5014336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaiso-ola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab2efee687b5334debc51f08e434fa82615b72fec135d1f6f450d53db3c5cc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agdaigoag-agahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a7a7e8657d6960fac232ccea56908cb0d836d057f8cbf8269f377dc16ea9cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a1687af3e543d17faa954e230a96768b5d6f14e0c6f5696d958dc9b3670120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauahur-sofi-dosh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e662cb758445a13e3247b3e58537f3e802ebf5c29f80fb06697c864ba95dba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e414bc0920a7b1727962d18e6f93944f0abadcf7ff8c8ddd13729dec02697b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tusintabi-ivaaduna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e002a74d6ecb227ea5ae1c06db2234aa1cc6a6b4fe1cf720031f40524828ade3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudufui-fadabida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0abb9835d99545b9dfe1933ba6b48c0f7c5f17c6ed0783f470dbd6ce0b64c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69dcc92fe065695726374d23e9119267b8c12aab6912c954276747e1b9dd0bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...