Malicious code in rindaman-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9474b1f134445c461f7bf9bee4514c6cb7dbfcb1321e798ef404d7a0199181a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukuoila-joiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53daecd95e49c749b10cc53c71a5b8de23759633de7a6f6883de1ee736029388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27856ba268b95d37381717bf5d7d60bd43d3e7712b35a844a8d555dc7f289db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutai-ivaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f9a6f8b1db9613d0ec28ab34a227644f46c69e2f13fe8ab41ad5772b14ae69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-geunme-ters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4175ff7d23afeca515ed08a1a9ab9577760be5d88f9dbaef931636cf2520f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec8e738fdcac38b353a08f163863665bfc0ffdc46267f5a2e60a86b7d4b294b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143572

Malicious code in afrii-zidan-tea npm...

Malicious code in btuis-suinana-mavmva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4cb13756d12d1d9ef8b5f73ee95d9238ec57f44a148a70cccc818a46f6759a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0069a882440afcae5aa30837850cedcaf2720dcd08ce6f8cc62748e721a8997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kais-ajiobniolaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a20209545879fca492ae7f03d7f36b3e1d7fefc27d9d9a186c51b50bb7c36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faag-saigafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5072436986632b3c10cbb34fa174d8629fc26c937f9eb47c97c46e3274474322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178584 Malicious code in sahunim-sat-fadabidantu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e336141c7a8b6d9d7fcd26363fbfca4d7a28ec2411a0205027d6d9107541b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172643 Malicious code in aaaaafri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d5ac3052cef0598d857ab13fafedc8ed738f59ad762805832a951dda613f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175540 Malicious code in koko-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f99ad31ed4279b2b152f3f5307d8961ede4dbcb570c028125297fd41117916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176695 Malicious code in nuilva-bavia-iav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e276412e6ff4d8e3ff704306ba6bad87aa32cfda0998eb2ab8e6b954c94c2cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177807 Malicious code in polymer-avgof-adagfgadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ec53c2fafd41058b464d5ab4e7498b7d48dd4dc4989ddf422608b283cc5ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178305 Malicious code in riya-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f40a38145a377c34164a9fa62fbcd1a9e34eeb67e32154a133fdf9f13c6f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177550 Malicious code in polymer-aafsia-gifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227af3aa6b399a01017f7c1ddba5b8e9a76f6a3dd58fc0b700d9c34781041d42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179225 Malicious code in tray-iuzp-pert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88117e5bf4a2e675779ded5877783abcd3eda364b0f468796307d8868c75160a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174283 Malicious code in goodaan-ngafsa-nafuagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05d37e73c5a2a7863f6f9f091f7802dba78392704aa0fc0bd7e669a73d7214b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...