Malicious code in hitachi-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b90334e7c4e59372f4fa1e7ff350940e71b04b2b22b098683df5f48c195795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-must-nirta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4bf4624cad06b483f4e268174353bc5e21b5167139b873c10c87addd7efc061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-alif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd79da6d8a2fb9d762563b686dd3fed4502f24f3797a058c133eff33a912e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-iofssn-tersd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fdce4cbdb79cf19ccf953f9c2e3fc96b41c057beda8f846d11ba8700331976f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b439ec9e13dda10890f4cf1f15feb7a2c9c43abf87bd17127d7029c22d800e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-gbfafgafaibsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff260f50d9054ac85f64c2389a4ce9fdea882c72d707d8964fc750823c9f8dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-fa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885de369b9ee31edad3e43af69ba0b1c3e96d4943c59da9e51bcd1c225f2bb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kiloa-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e445cbf4716827b850ee28662ccbb26ddeb6542de7d1c25200cf1a866caac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-mund (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59f0cda2e163ffdf400e42103cb3c9cc5ea5340377e593c8f7e45e514c6e2a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aafsfia-gifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3894c28d6e65eb50d18857543bbcc1d6ac6acad0c76e5ad879383aa4f734ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gisgsgghab-agagada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c12975a1a185257995b0ad0b81687110cf8335a6abfcef3db9245e5ef73fa37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banifbo-imiaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1abfd95e50c51228791999e162f9d199edab57395b756ab4766aa100a51f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusiautua-nutgagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0440aee00853a9a493c7a14c5b5dbdbcd5d3041dc2b2dfb39c2563b5d18bd885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e55e878625ba3f5c5391c297b2d12e3cc0c2c7e6a68a6e303890fc061156f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-halaodi-misalania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8b1702971d7efe08736ab8c151e5912fdab5a80587e8e48c55e20d7819543d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traay-pazuap-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b65cd58c7e682d8119bfa7244065e17dc1e98e1bb411bd576d960cb77b7a30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc018302a1fbc22933a3c76a97a7f8248b8326701c30d629fdd213059cf2630b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137371

Malicious code in polymer-tuio-tesas npm...

Malicious code in nuilva-daarde-fagafiafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82b7b2a1a8e1277d9e1c511cb6b627c36367683228c82839ca71e7935a0d029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaif-danuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb1adce0253b7635da301cf15d1b326bee83ab105cf7024dfcb0772f8d2d30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...