Malicious code in sahu-satug-initaggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24fa378ec3a4b74f24d66e5250f08a59afb2038a30479dab86c52da236b7e954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaf-danaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c97d25afbaaec013709b97ed0421f1a55d6a197aea5d7f33ac554ac2575af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimi-aiokoaam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711ed986a89e64b4100170578414cf3bfc5ab77fddde425069c472522a5b9d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-kokaialiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97861d577f11fd6c478ce919ccd412caf0f9118c86b51bb19a14826c58fbb8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaj-rffafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ec1c5068757d51829835ca5b9a6543c6dfff9cb6bc0503ef863ec41df9c479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45bf536e6cc82884762f6c4d22b3544151badf5be5a6d1a432847c426ed971f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cd985f7f09e39eb34955b27b1fa599790c0c7f5c5ab5eeda540dd3eb1d5902a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fgoodaui-sunabi-cufgau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b8d100da0c949b5096b6d13c43c93618837e348fb622fb412cfe33fd538b07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabuai-iumaivac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44c67102b7004efc89ec7b057d2833f8a70b45a57dd6906483a3e76141b2a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyafa-sutiayanu-gandofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 883af245f689a4c0b55a8aa601bd8f5e14bfac1634c955062b37e22effe6559b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mar-afadf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88dfa55f5dc3b5cc90c53c7a734b465f23b57afe57df6ae7f61595c684fa5b87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hud-mav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2c48e63a68cbef2939cc7a5cad67d918b97a0f07012d608dc97f75ff4933a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce4b2d368295c4139a1c9616f66a4ea8ef1627f045074bca42857a6551dd8d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyg-gibafgitfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f3d9f59b523b0f969b0dd435b47aae44abcda0bfdfbcd059fb9afe2e23a33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghih-fifffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ad5a8a8e0c5e918ac7e89babc8f0f78f77cc92c034dc531b4e574c9f04c1fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satmug-faninufaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 111d6e013d5ba63e06b4ee150940c2e19d79f81fad7c92ec838eaf404ec62cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143249

Malicious code in anna-salwa-tea npm...

Malicious code in poglymer-ogi-gfoaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378550254ddfcc310afa6a0e207a4ead8c11487ad3923a8f45b065e698dd98b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-nudai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caee493b1d14776a5f63eb2dc2a1c90e731c9393b7c7c80234c8060d47e18c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-faubs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dccf3863cd5c31a159e563803f723afd7d57d68d0eac9c0fdf912371523030a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...