Malicious code in nokire-kaguya12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a260df7905ca2c84dbf857bafc74e10afec4ab7f89120dcf782b59356100f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afsfafi-dafiafiefif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5ebaf12011e44ee8ee342e57d5ea39544b3c373be3bd882efd7a5eef84a822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b988e67ba2cf964e468cadd89aa148131cdbf05eca57d5352f7293bf1d6bf457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfadsid-radafadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b814160224ab6ef5a4ae707654cca0aa94d8e4488d842c904d18c13cb79340b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rusdi-set-rus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1866f9b40aef90d348a8d7dc3d70de0ef011ed43e9a80230556408d793d1554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2795bfc9875219076951e65fc5546f230ea42cd4aa10669dd1faf09240e67dbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adudar-baidya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e863109533eb415457d05ae933b9a4a2ecc17c7d258087f6486cdd615b279efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05221399123bec27827f2896a69223d075bea650a332696dca5caa3e36d88f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanuir-sofai-du (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2d7aab3b7ad907d1566a261cc372a0a81d075233509f74ffaaa8646e2ae3a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143226

Malicious code in awwwa-lia-tea npm...

Malicious code in hakim-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e9010a82557beb6f7ed3ee3174fc9274018af61693deef2f4a9edfe038c4fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugab-ivacaafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758f48ff472a2d7f2fa774a7643480eee0692ad217d02a132d3291297fc0138f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfi-dufususu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06226fa9441155d5c14763b5c8a7f8c19efe260a6976a5abc4522ba8299c78e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-mutyu-wer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37546b56a6e767f2df39fe3cf3b1de9a648e178c2dc0523c6a09810a737237f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutila-jokiloluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8fbd38eed65aa003883ee59586bb61f310312c37d9c9936aac4def58f5193d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-farsacamvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5b2029271db6a8308eebccf1baba93542f2dbaf9ecc6b454ff7ce96d9d6546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodain-sanvgaunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d3ae7e37f89dc4de1c1f358b4fbd2856de89c9de6fd8fb57d089d68bafee18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-giaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 981072f266b997da70c978b616a19ac77a3f66600d123454490b49af0ad34800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-maniakd-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f81c3b6bfa660df32b38f7903cd5a7f1324ab3f0088abeb8575a6228b32a0c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-nafamana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d58d3bda75e5d6622190551d64565f8fa9267473c1c95cfda5285e212072f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...