Malicious code in gurs-manusia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15a67c393ae7f80f230060f0d3de18b4214d2bc83a1725c002db985df87ca63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/isin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e084a14267d9e6d694b084cb0ec97c4a0a7fae5619c86e5558e0d4d8916f8be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaig-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa39fdc4443998decf2b175d104a20f04fd9c30389141200d9feb4f540f99cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690d38e22d6714b1e68bcd52261b2a157dd76e5d8d44bf09961a0564cecd9859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tfla-magol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 453798a6e577457fe2f1ed99c29dc19ed08d48cd281333f4ae443d80e4a8743d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d382f4d4bd9e914fd450750001fcf1303b7e0175e4f62241d0af84ced2fb4784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bc1fe72ba9b9d126f321d563f262f0c1bee138fa6c494371db6729f5c9a938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sordadi-naidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56b933173bc4b1d6f3f79c6d98bca2badad50b9f9af0f26740afe5b95f1d0fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0479cd7ed9763457fb033fe296d147b648b6a44e53c2362e5b7569e32f3f67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46f2b99dfc1e1c960e0d281a8f54738840c3be27651ae7ff305cacf579b2774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lista-patumabaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903f477046396d7b95032dfa03b55bc77e0ae19f183e6c6b61f73d751c16d2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-149329

Malicious code in teagood-nalikami8 npm...

Malicious code in ilang-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4357c9320a6cfe95ebcf83778911e5f91c6703415cc7f7d38c22951cd6f06366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147630

Malicious code in trevora-cir128 npm...

Malicious code in mutaus-manis-nubliwa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6339181bf98f141b0e55a5960b69e5f9fa15bbbbc20a248e7c687720f49cdd22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb75fdd8743c216305fd9ae264b98c4c97ad17c1442f8f54f2ba5d2c46854584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae91e04a3de70c2959781c9be1e4de3963b246da570e89cbfa52335828af1226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nuyasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3622a572a2abbc86022fb7df5e5b328d71c86bb403a0b35c643cbac94e55704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77cbb2ed59bee5f3b0fb075b81656f48958c999e91ff95f0e7da64f4040a3d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagiaas-fimokafiganu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23fa34d42e3e6928fde6715d00726361f177cf801a71c762157b4807d8e5534e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...