Malicious code in hitachi-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de5ae048294cf56000a4e28c389197a952d8a1df44d83e54b546eb8d6311f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiuna-gauafioifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f6daeafe0ed141c1f54050554cab38d85a81db588d033f7cc5def6608cd99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361ee2335fc4c9fda89683fd8a1b7eca8a60dd1617a2f8394054f279e3e0f6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897ea9372a618aa7b0edca02d92dc303c111b4a34b6182850a5e21e25765c2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gisgsgghab-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e0815909fe53b8a5126ac6e628acbef878d33fd61268004c0f3018ed053f3bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4601c2a1f434fcf535654a339c071cf734ed57dee7fdf9ae52951cfd413bd89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139287

Malicious code in nurrrrrrr-zidan-tea npm...

EUVD-2025-139291

Malicious code in nurrrr-zidan-tea npm...

EUVD-2025-143628

Malicious code in abaaaah-putri-tea npm...

EUVD-2025-143654

Malicious code in aaaaappppa-salwa-tea npm...

Malicious code in rindaman-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c111958a39f35330eaf3bdc87b60bee5f75e117f0691383af5cda0fb9296dedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143641

Malicious code in aaana-salwa-tea npm...

EUVD-2025-139253

Malicious code in nuuur-zidan-tea npm...

EUVD-2025-143244

Malicious code in annnneh-putri-tea npm...

EUVD-2025-143627

Malicious code in abaaah-putri-tea npm...

Malicious code in goodaan-nusafa-nsafigds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adef264c8170348aeec3bd3b24070fd6b6d87e711c95f295e7ce779e872a036d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisom-okalami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cbf95f5d892d0cda31674788f231c62fef2ee4e31121d1f4b6fc044ca36a1fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-radatia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234cf9f033034af20aefcf400da7804876fa7694e40ef35336a1f017875e44ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-uozp-pustr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cbdf7e34bcdd42c233a3c22568ae4c8b20fd8fb8dd2ddac197225a33c4de42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-kokaialiaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670574322d748af1f60ce7b229968c40a5c371ea23895a0a6db6bef967356dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...