Malicious code in fadila-poke134 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa37b9b699bfd3297549a8eb16fa7ba315efbbc0b8de06f4b8ff577d61fdb9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-rolsae-nutayadd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ae05166f4cb8a13450193aec35cf1df4c3fa7f7c7aaea9c4cef2f4383e2186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mundya-misptasa-riad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c884a939adf86ee837e37bc07ab3ef9d4b159b275d0a44ad96899860fdbacd94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5dce92f973e167e33806e6019362f1a8ff4c61bef884ab37826f90b9f6314ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-min-buipenajaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bab6e8077ea60b4977aea30022dba0b1666c712f19c8bd9b96b11c59e3f14fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasaaya-nurs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e301d111e5f3df6e8fc1f3c994cbf301b0c13ad59e53ac3356c91f7766c1259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-dulaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f63b52aa9331498ace8186994623eca9e019e49dab1080f7ae0a2460f9ca286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba4db6973c26b1da0ea407e28ab522d989279ceace82ee01e10feb52dd518e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f3d52b1be3433610276661c2f975a7a2872427c814c8981d4956949f89edf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146876

Malicious code in uinsu-lost-dauu npm...

Malicious code in teagood-sukuna88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d804a3bbd102352c541998e686c68476e03e08faa6f3bfa2c841637feb5167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mus-btraa-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aaed3f37853c02a3dfc1f3254a6f34f4199ac97c9cc9acaf02b4b9d400111a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-milipe-apmuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5966cc8a756506d3b3eda622a1cad98e27483f9c91114cfdc35e9a15f4ec66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tadashi-tssu-tad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197c46058762bed6745d325bbaa2f2a9373fc8dd5d2bcd14275f9f965dde37f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maalasha-nut-posisi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65bb25b0c8f1817dd1280276ceb9fe410ab294228eb8abc700a487b3828c1289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-148529

Malicious code in tealove-darknest27 npm...

Malicious code in jele-rasaaya-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd7e93ac6bea9cad22247c50a0e035c7f06e19eb0d85067c627b4d0be4c0ccc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusya-fsd-frssdeaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063a90b5588cae9045c5fc00f6630c3ac8d0d595f861cbbc1d1a9dca8f28f6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-amoa-iuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac47cae83d7cd2097770953c516e2aca49df923e82c512ab18617e8f001e355e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiri-agoburi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9cec56418b5530a96164f7b5608a2158b07ee3288791b571da6afb725137b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...