Malicious code in miands-massdage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2838695c79e4b4ceb231184c1e44551b99588e6d200fce795d4c74693e104a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403471f62df2bb68d87de04ae3974ac41f0bea7efc3a160deafc5d73636b6e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42aaaf4d009dd3e8dca0e837ddc3de626c4cd4dfe7c295ea1896da9fb413605a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-giubaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d468ad6e83267abff6b01f87166fe8b1b64ed0825a2b166f7dda6d79cc5bb828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140440

Malicious code in kupaio-ulokia-jakalokakaanaoi npm...

Malicious code in kapo-samunu-maiavava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6ce03a5c81f997945d65199444f99af797befaff4cc4d2d325db0fbcded6ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jakali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604982791f9ec760a710025858db916eca537f1734c956442f5ebeda7d0c87f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d3667af89882d5cddb35ec8ca2aa4856afc116798e0b436c093dc3bba57dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-sdfsda-trujm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d3794316088fed8b280a215527c653020640125c5a0fec29a3215a7217eba14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236d867e4dba08ef406fd7724de84b47867a2275ffe78daed3922c112595acac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudfui-fadbafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094c3e177a68a39ef12260ff947924cea85995bbfde6f28945c617276e0b2731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea745f78762aab500be1e7ce22a49f88ba50db901808529f2d41efb27ad30bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-adaasaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b7008b4340dd2a2d8f60c88df085cb043382c7869672bc8d158b669eec5dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b79b9643d226897aef4ce09471ccb6bb39070ae8e329284a93aca48f33b4a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mubafi-sunai-caai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8967ea3c427e48ddd0b785fb697841f0d922c88a779a9e5c7e0db316dc22e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137579

Malicious code in polymer-ibhgssbo-sgahsdi npm...

EUVD-2025-140448

Malicious code in kupaio-ulokia-jakafofoai npm...

EUVD-2025-142545

Malicious code in butry-mutyu-waegressur npm...

Malicious code in mibasdah-manasisgad-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4b233d1bca0ca58847f26e6a5082942e1300cba334eb8935edddd954cddb92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soaf-vaidas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f10ff86c0a98a861c218ff8b71f23da7760803401a908eca0731aa45333b34b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...