Malicious code in butanaih-asfafi-daujhsiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9dddee2e014c6d12bcbdf3e4167393f4ae1b2501bfef24202f7a698fd1b6e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-afofafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa77974690ce84b18547b1e266d307bd382a3932f36569d53bde2d77f2aa493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gigsggb-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dbd0e8b3b051874e6e257e11f3b95a5c979773cbee43e9b849cb912ad293360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5757997a638012ee69fac67c9206bafb9b97e16491d065dcddb9d9a143669689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tug-iviobbga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70b6f74a96dbd1c336916ad001ff13ae29e515feac0cb28d391ed8ff5ed97d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136489

Malicious code in sahunim-satudfui-fadafa npm...

MAL-2025-174375 Malicious code in goodafin-nuiyag-gifatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd2b308826e680ca5bdd475c811dea831814b8f24fee3decc0496d2b10d7f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174226 Malicious code in goditu-tuamva-dibud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3dd4d18f787ac64367fe6a36d936efd11ac679e074dadb1a4d39584adb8897d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176243 Malicious code in musan-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56118d9735bd9ede953681e42063a7830547ab78976e460e98660b7e84224f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172857 Malicious code in anak-jalanan-mdn47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a297e0df8279fc09bebaee521bfec9ec4cc28aa98eb93e9c8e827c8a9158e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179269 Malicious code in try-utudru-nudy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6853ac4f853d38287e282ea9cf3c5a7ff174f9e7f45d3c2d72b6c694a3fcf9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172899 Malicious code in anidata-hadis-mamaadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e08ee131c6f1708789f54007f7d9b23a11d3ac4b05299fa42e5fdc4669de1bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174403 Malicious code in goodafiun-tufa-fgifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b2d707a0765f5cbbc9c8655b02c96bb99497570fa988d2e676cd0d0647fbd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-must-nirta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4bf4624cad06b483f4e268174353bc5e21b5167139b873c10c87addd7efc061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3c2ecd7c8be18928aab0807b85d0bed3472ec3cdd85f44bd79afda68abba84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-buyaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b54e2c5335d28ff873ef64194f8795881d4d3e268bb9a6bb97a8c04b22021da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banifbo-imiaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1abfd95e50c51228791999e162f9d199edab57395b756ab4766aa100a51f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutu-gaaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3458ac9421392a568a4fb33c9151f595bf0352c24f70e36e53dd1b098eceddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140691

Malicious code in ksai-kais-ahakaoliaaji npm...

Malicious code in nuilva-daarde-fagafiafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82b7b2a1a8e1277d9e1c511cb6b627c36367683228c82839ca71e7935a0d029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...