Malicious code in shilang-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f87f073af266c91778b1e536c4455149017e438037b80d51e18bd93871c5fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae91e04a3de70c2959781c9be1e4de3963b246da570e89cbfa52335828af1226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc101ec4663e68ef24107519592ea234a3b5b21991e4aff4f3c177265fc0273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-manis-nubliwa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6339181bf98f141b0e55a5960b69e5f9fa15bbbbc20a248e7c687720f49cdd22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 680cb0a328c1c7b5f2ac3e67746fb05a879e61df8ec81ea67dae7bcf60b8d492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulp-kabook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba7160e30cf8d02df03a591afd3505f732246bc44f4586cf1c171b35f6f19f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-149329

Malicious code in teagood-nalikami8 npm...

EUVD-2025-147630

Malicious code in trevora-cir128 npm...

Malicious code in lookingan-nalako69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5584719c584b5346c47fdc1fbfe9d217d2b84c96f94052622c498793979714e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tfla-magol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 453798a6e577457fe2f1ed99c29dc19ed08d48cd281333f4ae443d80e4a8743d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-treg-hijau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7261c923090309cef4ead0d1117129e2fda46d66b2f02c503df1a0ac2920e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f197f926d90f16a6a8d63ebbc8dad8fb3611d9199b73141dabc56654a9718635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-teadf-nutradu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5989be147b190eb6f0da3828e3b8e7ab15c462accbac814f7f319bc0dd09d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5645c829dec4ce2d84d04876f70701c59f408e48ad7323474f561529e39f57e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dea48dceecac533d3ed2ef00fadb2e40166aa5a1e30fc18a6e1c8a1d9954413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-milipe-apuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982ee7fc52975e8bce216d240e3fedf3479491f492d1de8730996ceeb9dfd2aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb2867aadb629f47aea3a0193f750ed676d6e736a973d43749f149b03a0e8c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f43948e5069303287184cbe032338dacef2c634bfae4faf5ee24a326db6c531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e151ae847337271cd687e848e34958955550db028fa5770e1ae24c28b60fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lista-patumabaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903f477046396d7b95032dfa03b55bc77e0ae19f183e6c6b61f73d751c16d2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...