EUVD-2025-83609

Malicious code in vina-nasiuduk100-ruro npm...

MAL-2025-108283 Malicious code in rudi-sasag57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fc764b48e4db712ac05f0fafb1fa8c143131129ebc1b322862cf48a4177a997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-ruwet9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210d68c21243a50606ff8a44db0fcf04a2c9af5c289f599ae5e0d6413c266522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-ketan33-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4e0424f781293255f437704687276e02c5c06d45afd12fb6eae7a046cdc69d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-miebogor7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae42a92b982c019d74e379f42963069bde130fa5d4a7296a36c96c4420bb297c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101526 Malicious code in dian-kue9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf44f7686cb81527f64516e10487d0e09a09a6c0e81ce7047220e0d2c2ad053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e169c410f7733a8e476b096d1e74fa08a794f2e9ff61c344f297568e3b830db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-papeda60-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a20c9f6e7f4f53f2266b6d0d6b9eac581d8664d2af2a4a3ef1c4f3121ef281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-tongseng60-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41dfe7e4de5327d01237d5e6e13a578615557db6f23e8a4ebcab3edae732ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97595 Malicious code in babayo-appdevv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf7c39cb0012bfa45baaba6c39fa13c08e2c8ba5d6f379a037b3c42d1d3744a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98249 Malicious code in productive_purple_python-21-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b7e5459e1c3c4cdb4867d3c054fc0a35647a506c52d508abe14e66e3f9cddaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpion_emerald-62-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdcad2de53da52ffb3b004842798053cc55437aee0af439c26f087f1e6c557c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roasted_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6989af0d9fa3d95bf68de217d2305f10906c63771f043e2033f8384ee03e216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defensive_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc034d664a622e250eac8dd26710f79a10eb4dbc00069b9105cc98fb6a650675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extended_hippopotamus_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f2b73631e2c7b11f3d697bc5941793341a6fed55ad16b47eacac4eb511f28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94720 Malicious code in gorgeous_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dd75e7898c29537766bc5bacc84d221d0f22f44d0bec933d50627740967d623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wee_cephalopod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041d84e799c1b4c56ad23dfdd026c498893ab133bc6fecd7f45b30c00c96dc41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93644 Malicious code in comfortable_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858e8eb43eac025fb1a8949a822e08d503e8d2b93a505f21f5b1d95f38a3c441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eeb180918efafdee77540193e317a1f667b4286179e2a4fb22c6a6fe84fa74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steady_echidna_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efa818affcaa219c16b3a52ef4009cd624923f5a0ab9861c1b680d4731e5d62d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...