Malicious code in butahu-asfui-duuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af4245640dd9680a6b8f8ee9afe46facbef530c79f308a982c669526939cba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-vres-millio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef73cda9ea39e05e3f596564db50694be3a10462057483455a3c4bfcf51c914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaawa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f967fd4b16d2556a6cf78e7238cf60174d3e559e23e53a7cb03e57a739e4f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faag-saigafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5072436986632b3c10cbb34fa174d8629fc26c937f9eb47c97c46e3274474322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9544fdba89c7e3180015c23aa350c30b8125e9d1ec6f12e84be7c61531cc1021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61e1273d8c0d84080e677ec6bf18af555362546bbc64eeb6e77977431a41eb6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutau-gavafiaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77cd84410dff9d0f1b64f20c3b0eac3eec367be617025853c2ebda30a4c15d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf5007f2eda04b508100c1b91de9c2bee8d17303df47e0c1cbe0458e26227b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2046bdc1d9658658cbc26e65152a21ae040284ca04af748feef8f2d1cde8a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-tqbog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468cd5623f1ddca4aa5bf5d5e02aa6e35a4e29c31f4183f52210a801bee59bd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65151300a586714948b439bcd15c5bd934a4ec8c82fefd1e471e5c7c8e7bb6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-adaabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca938d4add29091e7ebd146af5557fa6b947f63ce5677511e8b2f971dfdec69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hauli-muddisl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70e0ed4d5a37a4c9a2211a33575c2d1843b9a12bef06db683eb45518e191d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1dbb33b04756b74cfdade67a16012d7048bd6ceb1c19892c7efe298ce0ac085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manahudat-ma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9247132a49933be75a619ea0113ca6792b69e149e81df449d848fc086295078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3008ba076dd8d09dd5fb5aad54c5be18ce782b89ea1012914435c1ec9dbc3c5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-madibavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5aa01a26097d43bdaa6648e278d5a927d236410f9f058f94ebb3f80dfd4c83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anuh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d0ba8f6fb87fcbe631419da7989d4156ed6bbb77bbe9763393b2d46789dfb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143554

Malicious code in akkke-lia-tea npm...

Malicious code in hokage-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5ea43064999a8dc1cd56f256e8cb7380a2aae83184030fae3ed0ef6a4fbeeae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...