Malicious code in teagod-nalika1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0216b1483fc0aa64419fae4722dc1b44f1ca2ff7ff9469d7becad40d71c1d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaiso-aola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f592f8f7c9abea2943687f5b40d82092cfceda420fca4ec7333df9fd89bc5341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-sjddi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab771be4a6319658652ed729c5434b8702c9fe3870e84600dbd4c3582dcfa0e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiata-nutuyagagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 134b3ec5b990f37dc926a098276cb961649c9d2fec8da9683b1ee3a795a45e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musan-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56118d9735bd9ede953681e42063a7830547ab78976e460e98660b7e84224f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143589

Malicious code in abuhhhh-putri-tea npm...

Malicious code in kapvino-sovni-gfsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f465af1df4c6b122846953eefb69228aec69f5c69a0d0457c5ad320620a9418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-gaghuagoaahaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b4f638644398c35cd5f66c3c1fb1daa79b4d7f4b82f0310601d8d80a95b33a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah11-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca96dd2b3b0ef5a566995d9bea900ebfbc1a7fb11a1c32a5a7dc7681a07cb234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ulokia-jakaofoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c3c25cb5c21464fabc8f37a4a86539d08be8ad7562ea1ef938c7693b8ff0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satud-favafra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7772ea200586dd8e127a349446bfd2313638db11d6d7682835746cfed97dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afahf-radad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f9a7767eb5accc170bd7860a076a105736a08253c773d4f5bf8293735c3429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139292

Malicious code in nurrr-zidan-tea npm...

Malicious code in poglymer-ognboagah-agsaghoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dcc4858c7f45d041ced19a6aa61662875cc4c9d9bd0258bc56532f25d7bd162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7124c5c263a42f3f7c4913236346fd04d792751ff84cf4598030dd820b0e9d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibadsdadh-natufa-munfsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ffa48b5236d1d4328f6501d8705f9061ecf33db8006e09b1ba292fb1fd9d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-bafaaggsig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9050ed1093c1d1bf32151ded226884378a67a8ce7c8412c05ebe58e28b884b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thudsdmbi-vsds-unu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f050d710d0c30683027e9c324ef5062a155cdb67210f1a6647eeb0d3678eb0c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-daraanusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f932f2405a7104b9f4aabede598d760fce5756008d2fc7623a5ca2a03d27bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37167cf41107d871f8bdb660ad7d337b0e45dd06658c46714c8ee3fdc12aead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...