Malicious code in poglymer-ogi-gfoaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378550254ddfcc310afa6a0e207a4ead8c11487ad3923a8f45b065e698dd98b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-nudai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caee493b1d14776a5f63eb2dc2a1c90e731c9393b7c7c80234c8060d47e18c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-faubs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dccf3863cd5c31a159e563803f723afd7d57d68d0eac9c0fdf912371523030a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsbers-burtd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62cae108d8a2913ed96327d6e1cd6e46d6eab995df655774bb25460ec5d6183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyafa-sutiynu-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5dc1532305cc3bd5a911097f80c19cefe55df0dabe9aad8e3b62b155c6ea2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f33a4db70572b5280710a2e3ae89ffa2cf197e8c81a080d0b4000873a727c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanabufir-sa-dubagifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 258d656117e1c48993c5ce9864d43e4760e50a16a6d89e679c520773bc28597b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminamh-abaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc765a9f46c60a5f3cec05c1bff511ba8b018c705b11a9906485c4bbb58ac53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tufa-fuagif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f18f4774575ab7cbf4e3d2431a58f39f829ed2b24c4845c4573d7b33b13295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-favi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11db732c9ed66eb42f056e41032575dbdf7e2d0108251f7eedf178404bc3ad85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bava-maadiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ba6a96759764c0f8013cb67037576aa83fcbfe7d3dc83c44758bbfd281eac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutai-inauva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54eed6b8094bbcb11a10d9a667096ed4b96fba9444a62a3133e5bf1f1357f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-ahagopgafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487ab2cb3486316af4844a17aac8e7649ee53ab375fe7d47869c6082055a0764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdai-dgagagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6983ad5435cc960c674f4c8df3c723fb5e70da75eecbeb8e8805c62f90ebac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-afggagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f23e234a00624f3b5855c63f8c08b1d5c70c2464cbf16f2feba8edece52f0951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banobfo-imuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db3ec98650a4d34dccf0a3f14a0a1fb2e77726c53c1514d582468e9073600a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-dihru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c3b48a00ac8b8ee679dda31689d51d016bb71846cba311aca922e153ee86cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fabvpvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b0ba78412023235b95e0d3c901173217b353bf009f5ff99041cc117285d7da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136939

Malicious code in saaya-salwa-tea npm...

Malicious code in riya-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d06138ca24942fd5f85b99315606291539f48521bc2867300882f26ce27f83d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...