Malicious code in hakim-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b889e6480c546d5ddd59d41c2a69b40eb1671b2f022d52158085040e9e48a984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satasamug-faguo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4100b5e0678d0b1987f601a6172fba8ad5ac17810a9af1ae1bb20eadf36a6eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gfc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c98cfa3b7f4062f0a1e2a8a5899654a1fa0daaa94a4ad3cb6b2dc8b29caa93a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safafai-acua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7e1808161ec5c28c0ca73c26078f9328bb150255c5f254d6b811f32d6d75195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafa-naufgaaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050a9b045c292386e3c687b804f2e101b92fd66e9f79a6f4cc3019b9c30982b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afajf-rofifdsafafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fd4f9ea7fe0b155a175ee4acce1dc2607b8dcd9ce2d46c3b41ed87f970d37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0438c4c190280d771479102c9f53df5794c4cb1c3ab4b33cf58f1f0093f3804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakafafswaofoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10e1553bd85c6b9569cdc3ff6bf8c2ee3bf9cbd8c77a16ca84f9fe7fa39e46d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7652b561bd96290b8d33ae2c8128ee2ccddfe18af1481cb759246920821e356c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143610

Malicious code in abduuul-putri-tea npm...

Malicious code in try-utudru-uyia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd8fde52ab078ddc24d2fe29f581f018bb720e966157b6fdf8ddf1878469062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kais-ajiobaniolaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8dc51767b91c13a4f5304d65456f90a0a6e4b967b8cc35bd740677d55a164e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe711ff05766227f967152e22232aae9bca5c2c41e66bf190924c25050ab307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-fuvdavioa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359950ab447d2130f9e0e4567e0cf35f8bc7070e32e88c760c3b6d90d3e3f0ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee970cbf44dd89b0b14c6b46434b5d7bb4b07c32835199ddb9f154aa6254e2d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mubafi-sunai-caig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eeb5bbdc11d95ac3f897ad6cfb65e8f4646325444800eb973f09a0e0f74bf81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksaki-kaisoim-olosdsdgnika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969b71a48711f2b371afc775733db600674d8523bdf21051aa6696e19658a5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socni-fuvavihafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92715cf979e946a8ebb0359c12fc99803037f67df1765c61c5912e3aecd10a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugai-imifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653dcfc6e5e46b5e8b85f0db960d5f12cc6601f62d8e6d8af2b18b6f6cda1369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c7b5ec150ddb4446ffc4f39c57e32680e9e8d36e9eece90ca45dbca0dc328b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...