Malicious code in poglymer-ogahh-fifagaffaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169370b2f69eb642874ba44413e65f545d5c9cd16cef4ac6fe05f9151c0506ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-houd-mavid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d353e0d28060ddbdca4a76f167a248ba1524e29600dfe3e1959050cdd926c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jalaloki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806b2b0825665bf09ed43826e2481be074f7453e5ede8ac3c070aebba7b70600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah20-miftah3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b4eaf151548bc3a07380ffc9f5a9d924bd8909889d463bfdd2df0035006f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudfui-fadbafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094c3e177a68a39ef12260ff947924cea85995bbfde6f28945c617276e0b2731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-fafsfskfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c6bc63015eab172687e70ba27fbfee85050cdd7e98cc2a613e96d8f6d48a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cf78672fde4b2380d32485523fae268a0994cde92f1604b1fb4c3cb7310f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-vimva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa7b0015d8134787863e4102c9771bd58eed502d0b107c96c194e41646df640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-nudnif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f1207fb8dc52d423cd07d838794563caa45e69c1eef4ca3e68f35e66fd938e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugai-ima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7db1fee5d853ec169dcc9de797e485ea453049aba38336796225933db5392d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143648

Malicious code in aaaana-salwa-tea npm...

Malicious code in rindaman-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e902c9e4358e56918ec40cdeb88b5353d3db457934ef27433185db63180848b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c839310308c94dd9aec8241a25e1a05a711d12095f468b2445d0ca19beff9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuramagi-sutaf-daugufuida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930babeb1e344c4f3182d4c3ae44a8c53fbb58939468a7d4d37d21758138023b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samu-maima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa7e3e7d2283dc71812420c5afaa766ebc5e9680fcbdd2775d436f501f8964b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-sui-dufaafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d578cfd5d7a24b92407090933d339fb3227816e7d25adb9899f814ea29a7594e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mubafi-sunai-cauabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d6ecb8df08b4904c980cfff82074394eb2eb7348fb3445a1894a91656fdaef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traay-tusdy-tryzu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed732f4bc6782a69e39cb7313936a35f7a1eeed27cd9e2e85dbba01ab1a956f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfsadsid-raadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3407d3714f07af923c07d0971fcc52c312c03361493ea435438b1f0a19575155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suinana-madbumovfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb8d18a558fbdfcb2a16d50b8705021c89e1659538779ab90b36414415986fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...