Malicious code in guras-visa-malay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c0dc0c0d7885f1281e1a3f80d0bb5c6c0889ff948637c46abf265f6c48b220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab4b643cb19e67ba546c21d673a971f9ca17a7231ddfd4bdd166404ee1cb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-matdu-mantaixa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4c357e9635b22353139edd72daf46a3c4440b7ad11f48818ccb45403a764c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-mutafafgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e0e4603a17e59ba2c00409592f8c9bfcae7a980be984655db4d0087f1de0ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabudaaopa-muyafig-buafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e147b49b992b0ecb499ecf7f5a2f107c5bd9c43a60b4bb2e00a99cd5b2f20d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munidr-nserf-tersd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c21c65c5e331802dd916fc6984b71ad5963208200ad55e859d7f62fdf85ceb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ota-uo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cefc86278bd4b2833be8a9a66f22a0826db5a17d6f9bd4296ab429f1989329e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avbai-abunahia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b007546fe82f32c3ed3b08594c587b9ecf8f4440796daa00838ef2efa91f1e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466b28313e39663d135f2ecaa0f25184b18478be6afd0042020725fec5e8831e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f18a3289fa860fa31464f3e375821ffbe198d5c5e8d4ac56f1a2e45b386dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jimag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc04eb44ee43d755bef265dca6e73050e6f0673db7f117e07f932ddaa28fa97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuffak-angabofi-gu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95724d3cc4caebdee22980bc76861c7623a54d503b714097505dc7e8c4998d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146530

Malicious code in verify-aikun-misika npm...

Malicious code in intan-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba7a2536c9f48559b7de8e94c75eb537f3d6bcc6d5514533071f99fdd23adc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ff90478af98dbce70c11c0dafb90c7e20f7de05daf43dfe362f9fc027e3130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143734

Malicious code in nabuf-otomabin-nojaggu npm...

Malicious code in pu-trud-mutiara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe2200a05c83d21d3ec4533684ff68b1dbf760542aebdb3021e5a9ea75b1f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27dba0c540e6bbecc935b6bfe63a788ea9ea7be19cec00f6d570fd721daa49a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1aab8435580a10370f8f367dbaab82a5470eb1d136c33046b08ec683b658742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3811ea649b7a5929f7d28bbdb637b4f800cc8ccf73f759ddcfe2852955d1c588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...