Malicious code in divata-tug-iviobbga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70b6f74a96dbd1c336916ad001ff13ae29e515feac0cb28d391ed8ff5ed97d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6248cd617bead739d3da1ac6d2b8fe6b2746add565c6ab4b9cd7604ae97419f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfafi-daujhsiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9dddee2e014c6d12bcbdf3e4167393f4ae1b2501bfef24202f7a698fd1b6e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butah-asfui-dufaufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24cd437c9842cbc2a6c71f438703dbeca093936f5e82d1640ed590b2023f9687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daerde-oagffalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b14ed0ff278f9adae2cb0130aa5ab3509aeef17da660d79b73e884721db8af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avim-rav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f33a3f5020528958e8bdc785635753e98c2652d013064ddc442e10c0534565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136489

Malicious code in sahunim-satudfui-fadafa npm...

Malicious code in hunim-satsgamf-anuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4eb5e4f536f158747fac22295ecf541380fa465f5422872fe7e94ff57089b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaf-danabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234230d6ca9a72313a64dcddd488a4d1a3f7e5208f8cc76e4013bd81e0d69a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jokiohakaikimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06dc097aff1e3041c00433fcc41e359b8aa6641e9532d43f01083d33a9740f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manis-miap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c171d7dd58270efa6b80a1c3aadae66e861c7965e6916d9eac5e9dbf03d307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7472aff56ddfb1ce95a8d5a53c20427f097992fa571d42e0bc118ea415dd024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satug-iguamgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7b2695781a2a761d10bc78a0faa7a0a7a5dc75003e1b8b22b7d4a0583fb34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140302

Malicious code in manadsi-saduda-miada npm...

Malicious code in polymer-gigsggb-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dbd0e8b3b051874e6e257e11f3b95a5c979773cbee43e9b849cb912ad293360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmiam-ravfonasiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccc7d763692868fb4c851c16f787500525ceeefa4fce8ee86b0f243d1a7e8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da63f5f704b0d08ef9e12097128500b87af30c873d59c4ab35e9ae479c94eb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-mem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcde3759088b77d57f90920cb6f1f816139d5c49f056cc9bb6b3cbbc8b8165e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457147ba75763bb8fe1b9025470155f1ac3bbace24bbbac57b0e0cd662b1aa90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-farirataf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 140b98856a1f3ba237937d9f0352f30a9d20b4fa73e3dede89ee57ad288530ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...