Malicious code in itale-dci-yrtdtr4q (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c9832b633818e2f6ca57884a0f85dcf9a2f547bf5ff81d5b991dfe0fe1eadc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137991

Malicious code in flights-lutg-oidabilo npm...

Malicious code in oliobc-uyg-afayafuyauicig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d7a30bb59a4e5a3df7c916cd5e3ab42a7409e9e99a557a7d63c1c5d058b31a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137649

Malicious code in gociay-ung-fugugaiagaga npm...

EUVD-2025-137767

Malicious code in astam-ifut-daki npm...

EUVD-2025-137710

Malicious code in avangi-ogoia-inlubami npm...

Malicious code in itale-adci-gnuygi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ab9e04ed2aa348bbbf0f7520ca34945958f08e00f17c01ee7857cb6731ac7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-gua-visagoigojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3287b48b3f6ab20225cca321e3550b6557debb010f0cfcd053229d27c82db867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-daba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e1802b587573b6f642253a25cc6d9fd55d00c4e10503f8f218ae6710a17dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuis-kjt-garfuaavdfimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf13173fc6d7dadf786993ec422acb0e36f4cfd4698b32450e3a10215babb388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-itnabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 977cda09375aab4f2b399561fe379b202045dc271cf1723270293fcbfab9ee4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedadopav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e29a26b3e252146ebac0149cfafd1e7982c324db07293d294dc0fb873f45a2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-ijimamfuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6bcb0f7340ca7f987b39b8818988bdbeb6abe2d7fe5e51088124e3f8e3b6a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136494

Malicious code in indea-fodioj-agafaafiba npm...

Malicious code in flights-ilutg-zilsdsdfsgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5158f138419d34d6150f130f4a49f191b5af0233e7a0270840f4fac3971c5931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-afahikuanaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf6929e7bc03287d74686b0bb8f0df2e7cc90c861ddc2a516f2710e6b8da008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobic-gob-gusiaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7556ede352e878b70629f579c78f0128ebae4a36da44cded2182aa304dff2a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138135

Malicious code in avangs-olium-noabu npm...

Malicious code in imugiay-avg-daiajuj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fc4e231c40ef4ebb32a941888abb17601bb68d4a7d2d51617390add70c0562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ce6fd1c582a2dc4c18581b402f29347c8029e0b1c5981f1870b3c75aa6879c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...