Malicious code in lobac-ubib-gafiufuufufaub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26960c10aa344ad6d0fe41bde87ce7f34a4fca28559ebb01badda9d6da7c8623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visagoigojahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a48724685f18b37e32aeb513fc2b9ebc9b4742a0d0a1c29eecaa92996ee9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dabua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8424175efbdbd473976c2f8d40e3eef19e45e1cc6fb0dba339e86dcdc3bec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-daicutaamajak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ef2d5a8108eb638005dc30b155a35f027d24913c586dfe9c8e882ef10cd79a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jyhfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f6ac4ed6fa294b92b53af7f1e0d25b2b9a867da788cef4b7aea6755263f0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fus-ufsga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b533569f5a474ba13750a6360ef24d7366787abf35805db48ac0b42df6862e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoerocneaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91cfafcbed9f2bc25156cfcede740dd6b5b88901607a534d1cbd40115b2c8d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-don-olikaisima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db25a9206a748db26ffe96bc4695c2c53016e84d380791c9f976a610bd3f9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-noliu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3df62744d845f27f36c1f2021566483b119f0a95cffc5673b84f7387e01e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avo-cobsabvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a2d2c03c5f335615f12961d275f78fef75cf8fe27379c76b81b5d2d9416e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138080

Malicious code in flight-iltag-zilauma npm...

Malicious code in gocay-uga-viguai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 351d5fe1e7b8d21f66d8c2e9aafc40baebf223fd2ea16600efab09998cc92e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodji-gigaiaafofia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d58ed2e2dbe309639f2279f9658a147b49482bf0a7e4617a05cc75ba6721b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7203ba9edeadfa8ee3658a0be8f33b8a75121fb229d2762af57ae1e64055e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-iyucauaufg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2173958aefd080b38753933ad2670c524fafbf1622ef047998726b47f9b82d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrstt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5827dd3e94fecab4b4c21d6a1c267c22b81ce7df8e5c5199eb87c00ebbc7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-hykaulaygkusaytang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74bbbe2a26043a49e6923ed5378dc6678ad5713aba3ad9a0d527e7198c3b9bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-fudvitifaaafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2821d99a6f4135602d19cb2240dd2779a6363d003730e788e1f04097d5dcf67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-danugamicfufoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef354e853b3d63c08ba81f8a90c24a60fe8a1da8d8e2d635cbd180c1e3c2c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilimo-civufavicasaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c679cf16c3a0a9745de8243cf7b9185f63ed8160d894904e6545f5a38c97897f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...