Malicious code in abiuna-mobni-aymsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59dafa57d388d003386c5b92af65d5bd4765ea671435f3befb06385a693fcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lukta-joalbiokai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851cf2d36f0727092d2b8bb4d7f07605cb833abee7bcd018b7dfaaa867bbe0ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobile-araonbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e175a7d597475d4c55242384ea674cb2f6fab362a5ac34d193b5c4ace5e7dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1aab8435580a10370f8f367dbaab82a5470eb1d136c33046b08ec683b658742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f0ee4de05c6ad9c816cb2a653dec83c6d6a520f7cd8e0f3a3889f3de10c3a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe79ca8f30b17b7954bd1244b97d5c0ebf8018ef56c8799d33ca5557e5aee35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1e4cfd0174d5252cf79fec5061077b2d20c7a117cde59de86de734a86238a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f77f11144437337a823c98ecfc2d36e87c497a6cbbdf08fb04f5f3594015f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbdd62d07dd2235ff3d4ac01c8c39faaab47ab98f45f8df6b767adb565766426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiri-agomoio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0285d3fba14cdbd1d171124a1039ecd40ca758cef6cb3500079be4e423117f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokiragne-asafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38c7d55bd357a512ba67cb18a068ffa8d9d017688e67170513bd9051ef7e318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanai-ala-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c36ecbc4af419bcc63b0f62a19c650cade5dd1354443b6163fbd1dbecb6127a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-goblai-januga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e98ac6d578017a00fec8a73dc39a8674298ee7750f28a1dd19e26f44d158d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf003d3e14cdd6e34ac865f743034379a2efc6ff3c74af26a326216bc847a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143734

Malicious code in nabuf-otomabin-nojaggu npm...

Malicious code in nabuf-otmbian-nuyafidistad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1007c6e7f5b3c635acb0d0e0748868cba21f57afbac7806b8ab7c5b3e9d652a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ef2fda2b44d1c6484383d40ebf90a36bf011e4843d1c752f9006e9a9eadf4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fuhopia-janiutabsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ccc524f46af3abcd5d56303f4b9e4ecdc75e5c9df19e4066b42421558506046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98cec76f6651292a9ffc892f06011fc12b5fa459ee8c56a2f99aa48ffbf32dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfba69bae657a49329c55cd2adbc568c411bf703f7ee5b32346a55c8eccfa5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...