Malicious code in traay-patri-pans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5544490241808843881a889bdccfca7338d2a6d18c6f21475d2e49dc7a396b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sayyyyyya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e13e1b108ea78c267e064c6752c7d06e453e7c8088ebd7e0e058ffc434a5f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-gidgaodafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4bb4a0effdc269a571aad47163fba845f566741fbed44077e2a9a91c3d6b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanabufir-softafai-dubt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90155d132a93b4a71ab8f43fc7e1d4b0c6a8f34cacee3331f4b5315ae5c10696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasag-fnfdfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e1a35c125d305e0cdc817828def5d6208e3e65895b3472cb844378cf115f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-agafafagmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2022c40274deb78a6bd93c609957e6db660491c3d74112d6e8d5da6b84adc6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf3e6c3e332c61a8e9a277c475d3337ab580e7ab0642f9282b85f9a8c7db8d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-dugofata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d07ee76a61dc52d1316732c9644c7cd7f4aca4575f62f0b5695dd148b35002b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faa-saiiaagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18dbebd899673b5b7e5b79a1135fef389e316c63c3c84ff27e8507c1d95303e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3745f20de1540592ad82b1421f16505afedd8e75bedb34f2d78facea84aee1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903345be3f8e1b00a46d0ded9e8c22eeed3e31c2ee55ad0296be126f566fb06c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-resdt-sdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd5f1c9d3694ba4788db538f942b317903dd8d6fd7956d9a04e3e0961998189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136994

Malicious code in rrrramadan-zidan-tea npm...

Malicious code in goodaan-ngsafa-nida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1be947505ce3bec26ecfa0e1aef8e9cf477f33cf8143e88c6c80fc35fe79102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-nuta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95215b0c8393bc4e9eed7d28309b099276391bd2465f27f426bff01a95b785d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e6cc488f3dac657c2ed6b2ac53989021c99b03224be44760bf6a3bd64c758c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ter-sohyun-memeq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71c0f3f00ae1d3b615efc0f1fc33123ce14587fbc6bbf1291e52cd9258e59007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sangunu-nutagia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db57a374c8ab46eb15dcc1c1a9aff916b131d4b4177785ad1c4e57fe62bb2069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faina-igaighfanaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264782228063cd249141c66c051a85d04b769882547df6e0a4065833b2834f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-farsamvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea34f114573fd81529fb127a2bee057b1a28f1b6dc3c97f7d3ec9855cce54560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...