Malicious code in ira-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ee416034cad51818f89d1b7c83010ea9d24c2d7cf7ceaccfc9b98b1e1225f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hopud-mavida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0073100a42c5f983c7ff04251ce683d01e21a666e27df7dacfa7de05e4d4c907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksaki-kaisom-aolomalao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947c37fecfbb1c8e71db2b91e2a5132ca70c2d9c1f9f248ecfe764cfa44fd2f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-butamana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22618abe38a5aa1bba5589a6098ed2904b9714c8b733b666693c8c797794507e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutif-dagibauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81039045ba1430c458923acdcdc89bc199b2587733d2d96d65bc37863ae5439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136939

Malicious code in saaya-salwa-tea npm...

Malicious code in digo-kaisom-okalami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cbf95f5d892d0cda31674788f231c62fef2ee4e31121d1f4b6fc044ca36a1fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in savion-duas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e45f686b22d95228533ce0ad55cf7a80d2fedc8754915692903d08f6a83fb31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-naiman4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec6826e84edd897584754ad81c5b7609b20e1b182bd11ea741a8acb4017fae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897ea9372a618aa7b0edca02d92dc303c111b4a34b6182850a5e21e25765c2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-nafifagfofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d393a0ce7a7a4cccb09a1aab3d550c1718bf295d00b5dc1b6c6a244ac88a83ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiuna-gauafioifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f6daeafe0ed141c1f54050554cab38d85a81db588d033f7cc5def6608cd99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satg-fani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 052bb62de35f892e455152af35b8ec049e1958039b97c68b9344216664e3f223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samunu-mudadabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f69fefa7b365325332230ed887fd5853e6d9e6777a12dd636adaa7d29092e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361ee2335fc4c9fda89683fd8a1b7eca8a60dd1617a2f8394054f279e3e0f6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gisgsgghab-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e0815909fe53b8a5126ac6e628acbef878d33fd61268004c0f3018ed053f3bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d06138ca24942fd5f85b99315606291539f48521bc2867300882f26ce27f83d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143605

Malicious code in abehh-putri-tea npm...

Malicious code in ganda-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd81f95eb2cb3a6fa146930f040eb248f5b282679c85244b7efce1ff8eb1070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4601c2a1f434fcf535654a339c071cf734ed57dee7fdf9ae52951cfd413bd89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...