Malicious code in lobaic-gib-giga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768445c5a75505d80e82f45ead562c007e3083a6e9c43e71df29fc1e0cc14cdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoerocneaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91cfafcbed9f2bc25156cfcede740dd6b5b88901607a534d1cbd40115b2c8d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-fudvitifaaafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2821d99a6f4135602d19cb2240dd2779a6363d003730e788e1f04097d5dcf67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-hykaulaygkusaytang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74bbbe2a26043a49e6923ed5378dc6678ad5713aba3ad9a0d527e7198c3b9bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mokok-lukaunai-huaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e72276814163d204433c15ddd04389d0e3af9e1e85d320d728b35bb3fed15c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-diakavgy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c69aeebce57ef1db0c7168526e70c925280626bbeda97de6ef52cb8d2fdd746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137241

Malicious code in imodiov-kufi-cocakmi npm...

Malicious code in flights-lutag-obolau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6b6a4356a19ce2da7cf7030d9d57f07e1c319711f10616ea43165bdc99e6a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137370

Malicious code in imodiov-kfi-cuwabimagvl npm...

Malicious code in poliaoz-aiko-ahkn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b375b104e4b31cefd3d2d90331d4729a3b4d202d80c6932af4c05d2ce819b072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafufiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77068e34e94237a64b817e5c84cbff2d167e2e865d515f7d41fcf615cc3d0a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutug-adibal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 761e1cc77ce5ce1834363046303b894b962fb9a1ecfd7427dd3c8ef13fbfc41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c7a4aec9da523313a3a85468c45778ef9d29f837286ce994ba773be80fdaf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fyejsyegf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d5edacac1b2d3c284afa3133e7650c55d579e3a2cbe8f1157da0833805b470a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrstt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5827dd3e94fecab4b4c21d6a1c267c22b81ce7df8e5c5199eb87c00ebbc7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilimo-civufavicasaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c679cf16c3a0a9745de8243cf7b9185f63ed8160d894904e6545f5a38c97897f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dabbamikumiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20051494bc401e9c62a1385967639d2dbda39b84d6071bf615f606f586833cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137908

Malicious code in astam-ifst-dka npm...

EUVD-2025-137665

Malicious code in gociay-uinga-uuggaucfu npm...

Malicious code in imuay-agig-iyucauaufg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2173958aefd080b38753933ad2670c524fafbf1622ef047998726b47f9b82d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...