Malicious code in imodiov-kufi-cimoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ecc9880b9618bd6bf5e7b048665bf08206705b549143215e0c615be7e12a311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-givaksuisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6339db5bbb096e635334b1f940ff60654b0a0630d2d0c377d34c7c82f57b5852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fagiuffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3fcd509908152c6aa364118f359e5c46070a2383e4cefe02fcd6436bc3ed2bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137130

Malicious code in imodiov-kufni-acumnacffgteafsgredcadfacvfehxafeabf npm...

EUVD-2025-136288

Malicious code in itale-adci-ggygbu npm...

Malicious code in manu-oib-givakisassuisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6bd5bbde0113cf42fb9268e6ff879734ebc4e9da3b086a1e75f9bce486d9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-jfggafayuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c51f790c15a92ef03b851d18bacd20ef9fbd9063892258ce99f1a3e87ca5c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136127

Malicious code in itale-dci-fhutdywehrbweyuftsf npm...

EUVD-2025-137946

Malicious code in astam-ifst-dia npm...

Malicious code in itale-adci-ggmatdnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573632d42ed22425fcbb1320544b205f57950153e42e2032d7afac363db066a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137673

Malicious code in gociay-uinga-uguggaucfu npm...

Malicious code in unise-kiat-bida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799c4dd38a502e4a3e432412686e407a46d3a46b1fcf894b194dfaddc7679351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136318

Malicious code in itale-adci-ggryuyegfjbsgbajtrefbu npm...

Malicious code in itale-dci-rfrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8081936317aabb1d804cb6fa6935078fc970eaf224cd64c6896c3563bf751fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ef13e89f65ac30f6cc8b9b50e4f0e3cb2194e4243ba5224d1b7fcff01646757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-akuivaaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2453c2017ea392408a551be8d6681442185c3f90cb5190e2729f7d4116cf0103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kilan-avmnab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ae2ecd4b47ec51e4cf4043eae78923b225e9d6e50dd76a6cb5c6d9ea33d3ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhitagfadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7a21e3cf834b27d979c4f89f582df61a601289eee7286ad9357c41eb6edafc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafufunfab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be4bda1b8ed3a94c739f79179298be028e1479b7422af6f96e7e59be868ba2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpantekkktoyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a72d7afd022ce0bae90eb2f2e5fca309e7f9faa60864e43c144a1f51237633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...