Malicious code in kapvino-socnvi-obsadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a700c063da118ffe0e8c4839c8f242acbd98af739d2aba1ac85b3a956e8582b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198cba20bcb7da7df45beeb6b40cd5f13cf549d7f90807f413fd5da1f2a9b790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6846bd6bfeac8825b6664962affe4f9e5998ab1d45648dc740a1e29723fd416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manyerar-nutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3c7285c98a3ff9518004dafd5aa97a8c901b334909520bd2e078f298169da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b769261fadd7b74954ba107b36eafc384a7132206180de4c8d51d4ee15d70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-fabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ac8540f246ebaafd0e23bbbe5d1ee6b2eaae8845bcb9dab4f2ba33d069d2b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurnua-sutif-dagiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419770b26cb218c12a39175710d7a39047a4b18d253675b2846021132b0df8ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-afafig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b1d479d3bd9fcd32672f5d97915a438c9f65742e8e9c381c146263b527582e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaim-liamkianr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00134f124d7aea49e45a80dab3179eca44fa2226769b2124dfa09e5c526db8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29197907ec9a5e646f77aa49b4af9062073da817b74ee4069a6c8bd5d01e6ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-gaghaoaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546ac762d2188661993bc29744d773cae46df3c58f73e83522afce3a46dcbf52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-bofafanifavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01efd5c981a6c59a6f106160e87ce243e046d6d97bc52d69b7871e61672d1b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143660

Malicious code in aaaaafri-zidan-tea npm...

Malicious code in poglymer-ogihh-agigagsfifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a3ca72ce330fbf113d68681cec823a3e269e4680f14cc787635c27f93f68ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jakaloai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3ca4821bb1ded4d4a9a8af8cfa0b645e161351e2d1d974843dddfea1ff3e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sayaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d9db8ba0700109ba85167df4bbd6fd99863e95490c6a80ea482c76859a91bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139968

Malicious code in nnnnnur-zidan-tea npm...

Malicious code in polymer-dfds-teh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d191957df47747cbdb8f5d4c93fdd0d8f4a7399052b40c3c4492c6b24fe52aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-kangasa0-nuy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b3bd2a80f6e8a5b928a230c1aa59484542aa9ba56f22822ae55ea93d32c11b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-rsi43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649646acc3e2cf704be6b9c7d425c7ee40609e7cfa2507027c0f214a23904282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...