Malicious code in aviah-afgfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfd1ed2553ff2b267f0dea3e72ef23cb749a6dc3ac165ecdcc54fb2449ab000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tayic-iamsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c92b9108c497e02e1db314b800b4f4800aa17da9fda97a7014eaa282a2fd6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kore45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dbdcb24cd6a9cca1445c4a1c63bd0cb7cceb9f0c0a5318d7694faa277360a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ef5d84e7bed390c5101a890e0769575066abbd0fc1b3cc594f70b89c6f9993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke149 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b809f8c81d075ddeee72f76bb1fd2b67fb68ff0f8c1f763a1f0426f9f9e705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-matdu-masn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32f31c39c3b6be5e87834dd3542c35cf4fa0239997a330f363b6cc4626bb2974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rassdasdzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5eef8632f09906fce790960af278af350ce5eea42a2c9ce9bf9655737394cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ce8d8a9e41fcd78a9ffde2ec8643f9307f1a7776c2231f86409db2984af019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a41d1bfd4a8e28ef1717bef1da0b4ff7ef156d1546b5d64664c2eae3cc4cd7b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30dc78423779fb7b357e40f6384126ec2cd311d11e1c84332cef926e4b9858ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8debc42289eeb69dbeb050d12f91be35f66d9c848b4ec74ab50c72bdbc15582c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamo-alauliaahanoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11db4f698e8ea77a8d37e5b39ed6e35a6ed3c650ec636e6d00bcaf5f86675c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamoi-alasiasaoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6b2ca3593afdc675467760668948c1ca4cff1520ed390e34eaf10b81acb7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35d55b6d9498e893edcfde5d8dca8594764982b60feddc4c538d339765d28dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fafdosafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52162f730f34745434ac8d71da8e47dd364cc2edb03ab63afed62eba64a0565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ab058f953a0762fe0d3c8d57867d9fd889ebc74eb36587a52023f773410354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-afgihaf-gafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f404b320c1fe50b89408dea2845acbf1717099371a8bf2efbf0bad79777b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-korean14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d91afb7bb63713c0cbdc01026270517e971ba792fbac55260c142c2f50fa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-149714

Malicious code in teagood-manaki33 npm...

Malicious code in fadila-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca1508b2123c5cd492cdd46c10ce8a18a40b6b69a0f514b70e968c6024c661e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...