Malicious code in ksai-kil-kokaialio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e92822e7ceb164203cdd7b695ac57559ffb49c0ee7e85f5352403a08d392e908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satgub-naiguanab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1642b125e28ebc00e1a173312b6e29243e622833e0bd5a2013b5cf04d33d1ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d8ef965116ace02927665b7e333e394065b9af084aa1f25738978c1409c5a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibga-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c465648a55ed6a25186807c0904850572dffbc38bfd2b89ed4387a6aa9d3ae50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imubauagr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850b25d951db9a1f96912bbfa99fae7e5d800f16071b6bc51b4e595d1aba99b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d460ae08486c395566adfacb04fb6694e3ad3b7c14b8f99d242a52a5e101995e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satmug-fafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62c96d4e25fb5692fd3082ddda4ea57842b8f1ce142c21a0854327c944ebabc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-io-sgdahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbc40711336e7d840192390a12d5b7624731b6409fe433ea79121bcb481211c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akee-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed02aaf95689b25b2438f0185d8d70dbdb1ffd88a6a7ae8e96e78559c4ee9b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-avigpadg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c31056aa7c9fe5ae1b87001687d34695b22998fc60429b3b5d3324b3c43ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-sat-ananin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d163bbb309bc6a2c6f61bb7096972f788de09d9c49827d454ff924ebede607ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-aggisihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dab6f15f304847b4a177aeaa0e9b584bed322476e3b2b472a82e3cab5b4bc5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-madira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab10f569c102a3aefa896a0ab21070cf452e029a8110f82f00cb3fbb0b7a2d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0069a882440afcae5aa30837850cedcaf2720dcd08ce6f8cc62748e721a8997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-uyte-buddtd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44c726ac1c977048b9fae05cb36092a9b5c37110d83650e563cbfe0177b8c5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed850ffd3fae56360feae483cc4cfc4253181cabe9b63b7d3d0bc5deae1b7043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136992

Malicious code in rrrrramadan-zidan-tea npm...

Malicious code in alvino-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143038eb894ba6ef49979d6fdcabd21de2e72e981abe4293887d3c87c3549ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-mavmva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4cb13756d12d1d9ef8b5f73ee95d9238ec57f44a148a70cccc818a46f6759a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-iafaggf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1653a485c5045b49e3e2085c8a665990eaa5637b48b175f3c2f68602de7824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...