EUVD-2025-141596

Malicious code in hitachi-poke48 npm...

MAL-2025-174670 Malicious code in hitachi-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45cde82024633ef42f1b89709db77d690500a37cce99070640b8534337f357a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98656dfe00bb39f770c0d0f3f88fa58e7d684964d79e26e90dd16fc62011f7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e363547f417a2422fe0dd24f048dda31d8cc46f2a05f193ed8058a4ebb67c71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a0c04a24eb7040146a413ecc7572542ea408db5d83e36365d83aa265fb615c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d15ed7e07d907a6153aed5a77f98c9d1fe69d9df01c493c94f3f9eb0fc40caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ff37cd00b9980cd5ef8a9973d900c6938e9aacac7bdb3fd8cec6ff337fb3a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed48c3ef8a885cfdc4e960450bd5178da1c6953354ab0f1123a119f9b99dac2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174712 Malicious code in hitachi-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a991f1e51d7d1016d81ae1d45ab4a0ce6b117afef8f48e1300a1e6a2af81bb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174633 Malicious code in hitachi-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb8086d6af88e3eadc51114038dd5d2c004a6094ccaafb582c07a54259eecb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174620 Malicious code in hitachi-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d56ea2564e895cc8bb966113b086b57df39d52d897b2457fad5cc3217308453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58226b1eab7f8f322ebdd4c3710cffcd61f57c9efd301e111bda1d70f246e7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8541ca64fadf5d79d2d273b3e346a4cb6f4c9a8089b07eef83c6fda07a441033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2a451da6cdd3c2a38f053a6eb9f18b482508816bc802e41c8f9c4f785952d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174668 Malicious code in hitachi-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e932fcca28caa0f23d3367e4b9276ac427f4ae0038ef2a2f17ca9b155fcb03a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174691 Malicious code in hitachi-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2d4fa90c88a378dddcb87f0b91ab0ce08c3ef5f5fa6566b81dd173d34fd3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174727 Malicious code in hitachi-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a453f5ffbb496bb9cbf2d6635753a60ea7cb41c3c6776ce2989bdc79e32c0512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174701 Malicious code in hitachi-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e51fb45d8775fb7ffa66a1ad496d0d29ede555433722faf2b8b7f7214553bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a453f5ffbb496bb9cbf2d6635753a60ea7cb41c3c6776ce2989bdc79e32c0512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174642 Malicious code in hitachi-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17b4def2131ab3ac520fcb73490705c5edfe6f6ad6b9434520be734c5b19720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...