Malicious code in polymer-avonnf-aboia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3d006ef8192eab8a95114babb381a3764b7f63f5ee050bd469bd43a4e55be4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-bsoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c66c31e82cb4d4996b61fb7837307e555ab32197c7ea418dae90afafa92fb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauahur-sofi-dosauapuih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bed0244b75f0cd8dc4e2540178a348d48cf879ddf364a308005639649ea1663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440486628efcb099562dee61bde40f559f662d012ed61572abbcc25503ed16cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ffaeaf67256d3665e2c948e2037a5ab3f7bc9d18cff28899f9216d5544597f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafadi-vainafds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef59a88dc85f91f7d870aafd28370edb96c1bd1517128ccdeb84e685f133ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akeeee-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee69335802c1eafc050336ad53a5165f6519ce80537b20d4c541206e8a35935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141512

Malicious code in hokage-31 npm...

Malicious code in kupaio-uloka-jalakioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0eb7a97de83989093a4c7cc12611283010cc6a28f692983058a26fa6579d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-mem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcde3759088b77d57f90920cb6f1f816139d5c49f056cc9bb6b3cbbc8b8165e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4133c9df6e14d6c9dab9979f03b9fa0f8408b9813572cb44ccff84a2698602d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butah-asfui-dufaufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24cd437c9842cbc2a6c71f438703dbeca093936f5e82d1640ed590b2023f9687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b90334e7c4e59372f4fa1e7ff350940e71b04b2b22b098683df5f48c195795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-gifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c65742897b306ae591e089209f952552f52a70991d9ca77b92289f38bb3be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a453f5ffbb496bb9cbf2d6635753a60ea7cb41c3c6776ce2989bdc79e32c0512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daerde-oagffalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b14ed0ff278f9adae2cb0130aa5ab3509aeef17da660d79b73e884721db8af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tug-iviobbga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70b6f74a96dbd1c336916ad001ff13ae29e515feac0cb28d391ed8ff5ed97d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-ralat4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9778d17ba1789a4e7ced6d528195b47ea3b6d86a4435d6594fc6f59726c377e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6248cd617bead739d3da1ac6d2b8fe6b2746add565c6ab4b9cd7604ae97419f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-saaufai-daufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1ded79c4442b5431b4aacb8d19e61bb2aca236f172ecfa322be078f685de45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...