Malicious code in tear-sdas-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06592ce6521368e96a3555daaff61a284130165ba775edfbcd0eaee1c228f9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-min-buipenajaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bab6e8077ea60b4977aea30022dba0b1666c712f19c8bd9b96b11c59e3f14fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4909e97a9b2ffb1fcfaaea7df09c6f7df2278e1b199278fc5d7ac88241cec4c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5dce92f973e167e33806e6019362f1a8ff4c61bef884ab37826f90b9f6314ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f3d52b1be3433610276661c2f975a7a2872427c814c8981d4956949f89edf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tadashi-tssu-tad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197c46058762bed6745d325bbaa2f2a9373fc8dd5d2bcd14275f9f965dde37f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba4db6973c26b1da0ea407e28ab522d989279ceace82ee01e10feb52dd518e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke134 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa37b9b699bfd3297549a8eb16fa7ba315efbbc0b8de06f4b8ff577d61fdb9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-148529

Malicious code in tealove-darknest27 npm...

Malicious code in manadsi-sfda-murif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7babedcc10c15b1e3306c787f0a560de1172bb5f0b83510184a23ae9bc1898a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nedarioda-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c655abebb0da065c59a0024c120f84dc728b6b0d856708af4e561dba693261bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d52dff9da3efde3350f730b96820aed97b368bfdb634a4103d8d1068ea6f5fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-rolsae-nutayadd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ae05166f4cb8a13450193aec35cf1df4c3fa7f7c7aaea9c4cef2f4383e2186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 803f2df1f91920417558e774cee4db5088a1128871ad5f69a8325b4a53689820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mundya-misptasa-riad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c884a939adf86ee837e37bc07ab3ef9d4b159b275d0a44ad96899860fdbacd94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojausggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7587c529ad59d87468cf93154afc828dffdd97cdf2d8d54cc158eb3e2348bdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ot-uoffuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc7cbb85379f36977864ca740deab577a88fafa4f461ee602438946930527f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-dulaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f63b52aa9331498ace8186994623eca9e019e49dab1080f7ae0a2460f9ca286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-milipe-apmuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5966cc8a756506d3b3eda622a1cad98e27483f9c91114cfdc35e9a15f4ec66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf003d3e14cdd6e34ac865f743034379a2efc6ff3c74af26a326216bc847a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...