Malicious code in gociy-ung-ugdsfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3980a5867c7e3013a8dd26e30dd269e9b67f84ce88887d0216036f23dbceeb46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-afah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74fffe55b01a61bd9c33fabebaf37d622b6437b3f2020f1f447b4900caf6b3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-ci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dfaede6687b0f280b7cd774b91015322b7d122215884907c2b0b8f7629626dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolisdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892a95c133a9a85fa6f61978fbdffa5f087cd0bb847fdd5016ccbb5675ec7c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisg1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1552eb8c34c4f3b20aaade8fc8b25211d13be55f2101452766998878853d8db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goiy-ng- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a289049f72316df99cf0f72b6e1c93653cae13b750758873e84ce83f6020182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137546

Malicious code in gociy-ung-ugafugaafug npm...

EUVD-2025-137548

Malicious code in gociy-ung-ugafug npm...

EUVD-2025-138294

Malicious code in avangi-oliuka-tamoki npm...

Malicious code in avangs-olium-nint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a35c14b054f7362d955b40ead3b24d4704ad4ff065d6066ac12722eb7a76af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojakiavuggijim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ef52a2e8bdc19d7fd9d3719345dc9d94d1d8714fdfa9a5ee060396fb2db189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5431f41cf3c763e3ba5c74b15f15863658d85189783db3f4df39f08cfb6eff27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rryusyfsuytt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7aff1adbeb9c162035ed3b3a8082a61a702282afdde809cf7032cf9f301692f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafiufuufaub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ae314450c78c7b92ac78309c5d4390a8a86b932017a0a0b1c64b9ec7250337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-ciov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4be94b058461bb5172b41bb9e6abec86b0271affb184c97fb4dff611d957e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avo-uucav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99567147933ecf3e30cf1291edac5c100d666bf3758e12b15e6c77046e572a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136685

Malicious code in inda-fodija-gifobaiga npm...

EUVD-2025-138344

Malicious code in avangi-olia-iani npm...

Malicious code in liobc-ug-afayig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e4004f6fca03bd20d0800f723e644f0c82118dddceacc5c67c286bac659faf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-daba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e1802b587573b6f642253a25cc6d9fd55d00c4e10503f8f218ae6710a17dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...