Malicious code in astam-if-dalimk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962ec2cb48f655922f880ae36e43ddb4b72465a5bd7dd17e59157123faf6f195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-jfggafuayuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbcda6f04a74cdfe960e87440eea2052b93e49ecdf039de2001832cdd60a83e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137029

Malicious code in imodiov-omfi-cafaceva npm...

Malicious code in itale-dci-rfsfrgdrget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16500d145160e8a515ad7d3a465bcaf4fca3bca1eac2d19ce78adc2a3ae688c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-fusadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0ad8dc050cbe44a4563bc0c62043790e416668391ccbcdbe72167e911fc786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183862 Malicious code in masv-ilisiamo-civufaguna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb915102588514880e302d2ec8729ce8c9492f46386192db09862c375f41e0d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185312 Malicious code in tunis-kt-gahuvfadduufafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4af6ecee38feb7087634ecc70575f123b3f8511cf9970fa459accd4b96834f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181910 Malicious code in avarag-olubis-bali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1355a6c47d32088c071c6942f71ab03dd7ad91fcaef58f557105d450a482e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b982166687ee0e5f958542f7adf33a2df035c2ada89095e87fad89159827a663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adilonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 621efb5c927998b6faee2981f322a35ccda9ea79777341f003ff7777e9ff1352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-danamifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb20452999aa36e5ef281feaab238e85e6deeb888fc707fa8047ecaadf8711a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oliobc-uyg-ugafabfiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd8befb1e7728f7adbf139220d7e39191ae906ca8822aabb95ea8bc8522333e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136140

Malicious code in itale-adcii-gnuygurygjhbkomtollujlnrti npm...

Malicious code in unise-kiat-boaipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ce60b62c31e5c4a0e2038330a8342509e2fdec21071e7d2e70bdb7a3805173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-avanuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90dfe94e6fb80b17413cee1e1877b79e62220e9a55228cd56b5957c8c62f7c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-faverufadix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ec345c78072d294e5933d7af00ebfc69684a5ba7ef1be67645909fa895fa4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acavog-fafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb4696066fb5855d6f6655e40f0709fb4c1c78987d1e577acd2701d7a3d8d0b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswadaeaade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf79b82314b5a7a846665f0b40aecb74aad338c1632ea4baad078a2d1230190e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd661555dabb507cb2551fb6667531afa960289b63d90eb644f276688feb016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cobabasvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 639db57e9e3fa8ecfaa94eb104ccdb6a9a4b7107babf26e75d174e68157bcab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...