Malicious code in mansila-tiola-mazoalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e4d637cde10900584e190e9da987289b70c04f3912261713dee4242427a816b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tactva-mechanical (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d30970fad27188972c072bb092ea9c104e5dc2df941f8839adfc747a9e7ef69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36f97c09365306db2571e6c4cddf15af60b4a41cb4a6f378d9d696a19776461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lost-dulu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f937317b49f4eacef10693f7c7a7a87d47cc5c179b112b49f407b525f203c52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60ff0b61f0a7747c1cf9174c07613771a180ef06da8ff7b5c085a23ca98cb8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428d2aef945e838feef4b22572f144d733132fa2d7f4fe138acb9bc4cbf54564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-148888

Malicious code in teagood-yakuna63 npm...

Malicious code in manadsi-safifda-munar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2373f2413460f7c064032a8987bbc49ffa08181e921200d535ef9e2f866b8e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyafru-tuit-dutut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04639939a8397c970c0c165221a1abe427fff19ec000f0d4691f72bd2da022d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otau-uao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3446b1c8df6176c6ea7ed5fb1a7cc811b890c18ed260d81d67d1e4ea381f4772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050f97caccdef9cb5a91c366caa01b4d4fdfd544275e1140c0c9d0eaa05e2c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdbc7baa427e0da1afd12cc3914ed675605df0bdb84d686bab189c18d8ef6421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tactiva- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23346406978eb2ed08c38ac2e938634804eafe2d836c5ecb1ccee534836442a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab4465215cb8164ed6469233c7eb0f74dd5b31654afa8c9d08eb9b420df2f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce91f3ebe001a21765bd791a39d64715c53cb3dd11df39718451259bf301f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-luki-nsubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1c56d0e4370ed478122aacf5a80e73fa15f4bc8da8c9b055e677ee203b59fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649fa44f98f193564c5b4f8e600620be20f61f19144a8b0a190bc0e17fee54f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/readx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22756534a87d21d4f8f0ce3ed99c7f0dccc3cc54ae2dbc6d0a5e3da4c795b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78564914083e0411c893a863a1617b581bd1e564054341725f7f95a79510ab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tear-sdas-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06592ce6521368e96a3555daaff61a284130165ba775edfbcd0eaee1c228f9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...