Malicious code in kaka-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da63f5f704b0d08ef9e12097128500b87af30c873d59c4ab35e9ae479c94eb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-mem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcde3759088b77d57f90920cb6f1f816139d5c49f056cc9bb6b3cbbc8b8165e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174403 Malicious code in goodafiun-tufa-fgifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b2d707a0765f5cbbc9c8655b02c96bb99497570fa988d2e676cd0d0647fbd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174375 Malicious code in goodafin-nuiyag-gifatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd2b308826e680ca5bdd475c811dea831814b8f24fee3decc0496d2b10d7f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-afofafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa77974690ce84b18547b1e266d307bd382a3932f36569d53bde2d77f2aa493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5757997a638012ee69fac67c9206bafb9b97e16491d065dcddb9d9a143669689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172857 Malicious code in anak-jalanan-mdn47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a297e0df8279fc09bebaee521bfec9ec4cc28aa98eb93e9c8e827c8a9158e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172899 Malicious code in anidata-hadis-mamaadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e08ee131c6f1708789f54007f7d9b23a11d3ac4b05299fa42e5fdc4669de1bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179269 Malicious code in try-utudru-nudy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6853ac4f853d38287e282ea9cf3c5a7ff174f9e7f45d3c2d72b6c694a3fcf9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176243 Malicious code in musan-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56118d9735bd9ede953681e42063a7830547ab78976e460e98660b7e84224f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satigigof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f88e58b45d0705dd79a88727676ed55b6ed4bc65205da3bac8673b48d5b959c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-buyaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b54e2c5335d28ff873ef64194f8795881d4d3e268bb9a6bb97a8c04b22021da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufam-iunu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f25e7b2d1102044b8522042d555395dffd16eee73d0e1f1e4afe21adb34b335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-alif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd79da6d8a2fb9d762563b686dd3fed4502f24f3797a058c133eff33a912e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaif-danoafuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3483114e6c87e48713c3053a1de1abffe1a48f3e23e58e8f73e7522c411007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutu-gaaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3458ac9421392a568a4fb33c9151f595bf0352c24f70e36e53dd1b098eceddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140691

Malicious code in ksai-kais-ahakaoliaaji npm...

Malicious code in kapvino-soni-fari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c4ac0630e581dbdbac200b6893ea64dc9595ffd0f2ebf1dbcc54c119014de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3c2ecd7c8be18928aab0807b85d0bed3472ec3cdd85f44bd79afda68abba84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samnvu-ubdvabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5bb16116d64f43d69c2d674feb87a9f32b0351db6c4423c578043de0ecf217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...