Malicious code in polymer-dadfadsid-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09066d3de84f75bad6fd93197808b1fc5b32fdc1d6d7e674d458243005d5004c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-buyaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b54e2c5335d28ff873ef64194f8795881d4d3e268bb9a6bb97a8c04b22021da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tug-iviobga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f51239aecb8a81b4a5e5a83aae21145d6f31beab3a49921df3b85010fdb8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusidda-nusadsta-manud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4028b0f7b8f9459c0989910777f0a4f6baa569eb0e8ce9ade2f39e21c12e9e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samunu-mudavdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577810d541c0978b9da886f3a13b69854110286665c7efb104c872a410426fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a45b58d3a5594cb743ec070e9eabfa950860e930c6f1cca3b54b59e3c9ceab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufam-iunu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f25e7b2d1102044b8522042d555395dffd16eee73d0e1f1e4afe21adb34b335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-alif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd79da6d8a2fb9d762563b686dd3fed4502f24f3797a058c133eff33a912e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abbdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8769999eef7765c6168b9cf1f19a4c304728d88c42984d8537bb684edbfb9ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-vgg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2fb2b7ed28f1a3884fa63dc342221d63aff4600fd6aef0c39d207d5c23366b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fvnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94449349041add6084206b6cbbd9aae9ba3526a8c976bdee3b4e8ae8d0c413e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimiabai-satib-nabb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88c9b9febb07325d13e02198bd2ca25c7471170bf96d9638fc93b384f67a1910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traay-pazuap-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b65cd58c7e682d8119bfa7244065e17dc1e98e1bb411bd576d960cb77b7a30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutu-gaaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3458ac9421392a568a4fb33c9151f595bf0352c24f70e36e53dd1b098eceddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140691

Malicious code in ksai-kais-ahakaoliaaji npm...

Malicious code in polymer-adag-sgdasdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5289e5e29791b66a25aa4572780015a9eb8fd6adafa8558bc3e24a453991dd05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcffcbfa5948ceb925ec4caafe1dff701ac4f70dcf27bae1b3b7395b4d41efe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094971287254b5b102d4110bad8c65aa3256788fb1f363a66402756f3412da2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manahuddat-ma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3de13d54ba9842e6d52f3da49c6c944ccad04b31de8f5a2ad44f9ae82e6955 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socni-fuvibpva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e9fca1d265c95d1b2ff849c2366ccc41ed2e8ed54c20a7c63ee1083e6ab84a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...