Malicious code in kidt-aog-u (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04cd2dfaed6976e40b9aace850bde71aa37048cb3d07e3740f8c07322e155be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-gias (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffe135f06cee7f7f9c4c550cb749c623ce94539370958c61d2a28986ae678a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137316

Malicious code in imodiov-kofi-cuidcavuaomnodag npm...

EUVD-2025-137344

Malicious code in imodiov-kofi-cuaucdocavggl npm...

EUVD-2025-137526

Malicious code in gociy-ung-ugis npm...

Malicious code in sonic-jos-afafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50e29e8c15fcb58c4b7357e33a2b8c505d315332dfe617caff64ad7847084fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d378327361be19f66459d3b835e3754921c128e643a95ac70522383204ad593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-moigfc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18972744735759ad2a20c40d97f6d9d7780eef875ed7cb15093c676258672275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136420

Malicious code in itale-adci-akontolbapakmuulltryfi npm...

EUVD-2025-136442

Malicious code in itale-adci-akonlki npm...

EUVD-2025-138091

Malicious code in avarag-olubis-ibai npm...

Malicious code in tunis-kit-bogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbfc9da885c525dd8219ad6b16c3b0932ac1231e343c6a06a0f55dc13ab8b444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-civa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f5184a8fbf05d3e4eddf6186271a0e3601c32717b6f71138de06fe5a1481fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135990

Malicious code in itale-dci-srtrt npm...

Malicious code in lobac-ubb-badi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2190990f78d24bab53fdd71fe410e9a57e7f1c8769a6e9e42fa016d13295d56e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138172

Malicious code in avangs-olios-nolibyi npm...

EUVD-2025-137832

Malicious code in flights-tuiga-alukza npm...

Malicious code in imuay-avig-iayafucamrfuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc305fb5369263e0f387f1bec9f859b87faf548e70ede2d4b44f1060da288d91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcuadojaepav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0352f621d3af13b88b0127eeff1aa5ab72c74691ef61cc12a25c8992b1b2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gi1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd4b16abb1671cd2cfffa342fd1cf294e4b8348fef019910cb321adddc52aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...