Malicious code in polymer-afaj-roffafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84b3e55fbae73dc843c99027774db298671e13d1f0965973f3d5ed7e38aaa88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143560

Malicious code in ake-lia-tea npm...

Malicious code in anidta-hali-midadl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ec56fcb4ecf7f9d536af6a00e458218c82b8680d6cda54a5c399bbb4b4e002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imunasggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68962eab62aac258bf168456be1f64f7fcaf56d6c7620aed2ba3035ae1abeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-mafmada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9257af2262e5ba4c10d9e27a591c5e3a06404030f6eb81d2e4ce9e5fa1bc3fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanabufir-softafai-dugabuat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d51ef7270be062a73f1f63f29d1ee19bedde6ab92c5f750cf1220290c2715f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1679e4225440ca6891eb38be209dade4aaadef67046133f3096d3faeed90bfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaj-ratfaoaavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab54d4e0389127f92afba13ac25b142960b5e15a810d64af2e83983167675581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-affg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d80511ede6f618285808a799221e1559b8bd20968482e0c753732aae76e0876b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufam-iunyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009fca2b3b09f252de6ea56c9e256e3dd38935e1eca7536c33fb720227fa6bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-fuvdavaiova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c296dea63ff446fdc7a3aabd0b90759cb8e8d1d7d0eef30f48300c7964d44d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ca5499ee64242592ba203a909b4c8c4de396892b5992cc264a5447997c4851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sangunu-nug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc3ddad77f370e391966caf6f69062e0512165120975227c31d348c73c55289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-sjdasdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9569f3083d09e4b4f82817a3f50779c3dd979da9c31fc27bcb454a67df40afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-rasiyasiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00468bb22f786f72f8a17f19dd139056f73c0c6fca9d126d828ef47a808d620a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11915dadb7fd2ea8b3cf2db29c7ee2030f8103547522b56c5dcddb5a0a8ee305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samnvu-ubdvdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c21076ad4c27688642fe83007e287a3b6e9eeeb10aeb05e47a6ed9674eb2db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02b3a1abecaa26df7e07d4c9a14e9c749784b4248b88137769119b578a4d0008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-nffaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6e80101dcf141f659d6ca9c13e157da57fcadc74b655a7c64eaff4d7080f576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaghuagaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b3912ba0f3f0f03c2a758f9a65d111f99558a75cb7214ecdb66a1dc492be1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...