Malicious code in polymer-avonf-afofafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa77974690ce84b18547b1e266d307bd382a3932f36569d53bde2d77f2aa493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141512

Malicious code in hokage-31 npm...

Malicious code in sumpel-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4e6270dac29a8f84fa31daf4e02e94e53f3b2af467cbf55335038b516c0347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136572

Malicious code in sahufarf-satidaf-favufati npm...

Malicious code in aake-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6172a7e35d00dc9f2623e1c5bd4c53a2afd21540097b8466cb406118fca5c9da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-bsoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c66c31e82cb4d4996b61fb7837307e555ab32197c7ea418dae90afafa92fb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-mas-nuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b55cd059a258dc9838d8ca6ed050c187e6618067596fd5a57a03c4de1d09d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauahur-sofi-dosauapuih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bed0244b75f0cd8dc4e2540178a348d48cf879ddf364a308005639649ea1663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-radat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8c866265dcf3d1ba48879ad244df3154afff2e835f95f4be997a019917ac15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ffaeaf67256d3665e2c948e2037a5ab3f7bc9d18cff28899f9216d5544597f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdani-gagfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d2e4a05e9e0834f53fe323a087d51d2175a906e9f42f74f0ab6b709003e5f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afsfafi-daafiagfif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc393b55007d5a5a95eeba455f3219c4a8758587fa30fc48d53beb36f8973e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gigsb-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4204437d26faa4360441b06e58b022cd53b658b1a0959c0494d54f3589e6fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jalakioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0eb7a97de83989093a4c7cc12611283010cc6a28f692983058a26fa6579d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nufuabaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5318a23f70387f3f2081152414ac260481b12a474acc6cc71298fdbb4bee733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-saufdaggafoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1abaed1996ffbed75eeb2b51183b2471e2d67d0828b709041c92507d273582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a453f5ffbb496bb9cbf2d6635753a60ea7cb41c3c6776ce2989bdc79e32c0512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonnf-aboia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3d006ef8192eab8a95114babb381a3764b7f63f5ee050bd469bd43a4e55be4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-ugafaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30aee34cc5651400f9e3c40028fd578ae287da983c012c7c64c86f10f2af7a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440486628efcb099562dee61bde40f559f662d012ed61572abbcc25503ed16cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...