Malicious code in buta-fs0boina-gauafiooifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478cdc395c8eb50e97e46397d940b369988c858411481fc83087dcb23e416069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satu-aniun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3016b52e4fae821ecb06383a9dfbd52985fcd93026e09fc04967e720ffb741bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139570

Malicious code in nuilva-bavam-madivabunav npm...

Malicious code in hokage-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7472aff56ddfb1ce95a8d5a53c20427f097992fa571d42e0bc118ea415dd024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manis-miap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c171d7dd58270efa6b80a1c3aadae66e861c7965e6916d9eac5e9dbf03d307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140302

Malicious code in manadsi-saduda-miada npm...

Malicious code in kapvino-socvni-fuafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78267d8c9a3b938f521626ab552a8281a38dce5767aa38d4f4879227b9806ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-radat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8c866265dcf3d1ba48879ad244df3154afff2e835f95f4be997a019917ac15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satug-iguamgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7b2695781a2a761d10bc78a0faa7a0a7a5dc75003e1b8b22b7d4a0583fb34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4e6270dac29a8f84fa31daf4e02e94e53f3b2af467cbf55335038b516c0347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aake-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6172a7e35d00dc9f2623e1c5bd4c53a2afd21540097b8466cb406118fca5c9da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satafi-anj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8059b7ac049a0f31ac574a6a80018d2565c99a0ea97918a996392e8b5febdc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdani-gagfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d2e4a05e9e0834f53fe323a087d51d2175a906e9f42f74f0ab6b709003e5f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-vva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0baba630c81bdcc7a7c26753f042ebd68da509b061f3da0823915f325c58bb28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaanuh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c4857174f2c31fb4465a8e816d2c964c6bd76649126a5de9279b8e9248c53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-buyta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31d1778ca31b506eb1e72e0d827552bf392c992b8637c83bd7ad53664abb9466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gigsb-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4204437d26faa4360441b06e58b022cd53b658b1a0959c0494d54f3589e6fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5757997a638012ee69fac67c9206bafb9b97e16491d065dcddb9d9a143669689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfafi-daujhsiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9dddee2e014c6d12bcbdf3e4167393f4ae1b2501bfef24202f7a698fd1b6e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-sautuga-infarudui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7e3668b860c6a00933c325e7cf283c1b0a5ff929b983e0e23ceac9664ed3c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...