Malicious code in poglymer-ogmih-afafiaavg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6490b458ee71e2e8d5f527dcd9ddcc6fd68244f5be18f45d72919bc20f3c070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tuam-inapyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16929336f49a9dc9aef82c748455faa22ba1c46b49039834c0840dff1c1bb173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-bafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51c6d5aabb2a093edd8544a7a8c4c77738e7afa09e89f4f5210beb88c90804c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fafihaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e032b93fb182fe85b86f749708cd192fc179edcdae7303c0e8df4cd8e3c5f922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyu-sutavbu-gaina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cdfc2e5b56da94333d1a0e4816f9d9d8c80295bdd9ba3f09c972f0e71eb77ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudfui-fadabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc821100706f319ae7bbcc97e53548e047bf5871620f266fa6dee08ea1a70cdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3cc400a1ab4865e023cbe8e56c3d0e291b3c41c00314ca104781f7a90313a7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136402

Malicious code in sayaaaa-salwa-tea npm...

Malicious code in nuilva-bavaim-rasyasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300c4ac68a124b73be46c7dbd9f2563456544c7d153465ac54b6d53bb43a2a2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafasi-vaincadas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8785f2a52c0a1022d08c326a3b55192c6a5a1b08609c56ea75d7812c7fe2cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kiloa-ailoliia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b61eda4c977ad740fe4d30067c57e22b2585786955e07d8224aab8584ac9e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-hali-butaaysa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9fdfec989fe6a6109c02a285320a8444d7a0607c64f916826b0b3d593c2fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abduul-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6be49130f8a34047dfc23b116b6d916e0581d9f47ac1a8f38e9c264b31e32a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satd-fariraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab33dcd6b05b471bbe7c710ca3fb6029735e08f2175747aefeea313371a920c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3610be3e459ecc1384d23741fbf97ae9eb323d3989b3f235345373bb8a188707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afrii-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ac4124d936f2676faf3a415877f38467566ed08ebea87669ad26a8b63dfdee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapio-samunu-mumadadbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10aabd5154fd659f12465690bca50608a4f0e53fc03fe61aea0bf6a9f0fe32f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73235b3f77383261465dabdffc458ddbed053f10bf5061af278ac0524591152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisoim-olosdssgika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d665036f61c142d80980b89a52acc1e0d548624c831ec22b5a8036f695a6ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87738cb2db61e90e103da46cc98d5794685e2814c165b8b6694e1bc0acefcdf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...