Malicious code in sugoodaini-ngasa-abai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e039e295fa2cc30361b6897e8a5b202e467b0acfe121ed48b5c2982d20d9fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403471f62df2bb68d87de04ae3974ac41f0bea7efc3a160deafc5d73636b6e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-favi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11db732c9ed66eb42f056e41032575dbdf7e2d0108251f7eedf178404bc3ad85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140574

Malicious code in kupaio-kia-jakafafswafofoai npm...

Malicious code in sahunim-satudfui-fadbafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094c3e177a68a39ef12260ff947924cea85995bbfde6f28945c617276e0b2731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudfui-fadoribafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bb06e2b2adb6076fed137e4ae78fc0f65a0570cecfba9a0be7e8ee2a6bdd59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afhfia-gaifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8ab4aec6b6fb82f907eb53ffdfbf5add6d4c1875ccb94cae0410c39340b59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samnu-miva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec334fc7a0edf36d27704d209d571d063173c2200870ea941b76c3626905199f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-sdfsda-trujm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d3794316088fed8b280a215527c653020640125c5a0fec29a3215a7217eba14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236d867e4dba08ef406fd7724de84b47867a2275ffe78daed3922c112595acac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e36aab34606290fddecff3199716993e2d3ca0599c2b873ce1bc499caac8073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satmf-anujafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0d5caebf6adae65dfe63111d6274a234f00e897ff6ff7f7b2460c5651d771b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-id-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 552229e2f5e7b2dd80a5991ecce31289fd7eececa58ed576a47ff227a1659c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42830369e521d7f0231b3d6fc601af2d8956aee1e99ecea64a3100ff0d479bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-nuta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95215b0c8393bc4e9eed7d28309b099276391bd2465f27f426bff01a95b785d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idagfa-ratafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f55e5fea34829863338ddd769c8ed08307237054ec6478e0a37debfa8fe6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdani-gagofafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df438247bf6dbd654fcbaadb3b0c18f11b3a4028d8f57971bc51ffa89d35ac9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-adaasaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b7008b4340dd2a2d8f60c88df085cb043382c7869672bc8d158b669eec5dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudi-fadabidantu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4cc1ee447cb7b30bf1f6b53d31bcf71a4a832c18411005f546924d5c71d0ab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175592 Malicious code in ksai-kaiso-ola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab2efee687b5334debc51f08e434fa82615b72fec135d1f6f450d53db3c5cc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...