Malicious code in @mipta1/ggkk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16563c40c97ddca78ec6d564557982a83a85b58b7cc1b9cac65a0ee6ff342839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmaas-adsia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661767970d0a63a304553d8c2c7746c2968aff720978041ba643f2a7bcc2d563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cede944656044dbe86fcbd24b7a386653b249221204a86110e6206a45ef0285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d53ffaf9a7eef73f47ceca1454e1772b7ef84b9ffdd39aefa0dea551a669c5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciag-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824d47bb93bb1b799cd3554b1b78543ab0dd66a2a35a69929e25bf4437cfe44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vumaf-nagafuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbb96d5b6cb844d754c072182849d400a77fdd266b456078356bebfb39c8bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musasiak-naik-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0681a90b29c7877cce234cfda9a80941e330d9998949b71b450778a371d28d72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanai-ala-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c36ecbc4af419bcc63b0f62a19c650cade5dd1354443b6163fbd1dbecb6127a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunde-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8070c6b8314aacefa699b02e78ba068a39610aebc957af734fa5b78991cca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbf05c5cfad396a8ab230f6587b63401fd21821cc0c5b5208add0f5ba394f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotvama-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ee357077074695bdef626900d0d97631168f74184a940df4feb015b71627de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144072

Malicious code in nabuf-ogaf-doifaogako npm...

Malicious code in teadg-osss-miuyts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb13c8ca41cf2f103ee8d520d51d9844222a4cdc52bd9f45c3e26b80519b52bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e70fc4dea059cea9f2eda5ffdc88747843018a6c82e51d93ca5a219267d953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhufyu-tadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce4597fa7d902125053916b42567b71c93070548bc9d3831ea280a5c30c57a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salabunli-nalikabuia-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84a6cf6c911e932535801ef783a6e25f20c40e67800fd79fb657ad29a1fa928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1e4cfd0174d5252cf79fec5061077b2d20c7a117cde59de86de734a86238a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoimn-igofogaggi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f614a184b29be5169b1c3c840c5036132b3da1da22183c8ab898f826cb0b34f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 686d9886a170b562291e77af799948b0f5a7295bb00a491d864df1e784232eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabudaaopa-muyua-bagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d952dee3e8e9fa0a1d82976fab8fa4cd8edd272eebdcff5bba7c86c653d274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...