EUVD-2025-140574

Malicious code in kupaio-kia-jakafafswafofoai npm...

Malicious code in rintono-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247c46fed48d8d99726ed87a0351468afd7680a2541a8bcbc6d92b28e9f9f727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimana-satiub-naiboib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed914dd74ae15e0abdead71a81a5b85b987875a307900621501dea8bade077e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-massdage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2838695c79e4b4ceb231184c1e44551b99588e6d200fce795d4c74693e104a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e414bc0920a7b1727962d18e6f93944f0abadcf7ff8c8ddd13729dec02697b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdani-gagofafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df438247bf6dbd654fcbaadb3b0c18f11b3a4028d8f57971bc51ffa89d35ac9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178466 Malicious code in sahu-satug-iguagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cd068d02d97583b7a0d566ac6ec32ca429ed2afb576ed5701faf155e3a0604 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178914 Malicious code in teagod-naiman9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3fd3deaa2d95ce6183d65ddb6f427aa8c984eb96b7c230b37e735a4c216ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176278 Malicious code in namada-kang0-tin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed8ae2a13d0dea670f11a0d534c2584eab59459a3cb335957df30fc961f4a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178848 Malicious code in tauhur-sofi-ditouay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c41859505c5ad5d8c436a8be43b308821d6722816e1f4a3306d09fbd59fb27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176157 Malicious code in miusafasdan-fafafuds-afnaearaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3079ded3a00494ecdbae1813b35c393f0e1e0cf323b8bda21b420640968e40cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174510 Malicious code in goodan-ngasa-nafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77160446c6ead9a307f8ed72c3dab5dd47066e7f577097e27463f902341eb935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172936 Malicious code in anidata-hauli-muddsl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3bc7380cab92e39b2188974112db2dc04641f04aff79ce042c5c1dc72d84b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176750 Malicious code in nuilva-dadre-aha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f76c2f4a6af7ab418c31910508f54aecbc748843fdd7f9a534055d9503f42f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176689 Malicious code in nuilva-bavam-madianv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e354d7a00f9a1a20b781a9789554aeb316a9d87a72d2baba03a39a77a6375703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174400 Malicious code in goodafiun-ta-fuagif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea949d3dcf49d7b90039d757f2a61ef19763d66e42c87c7473517d84028e4b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174197 Malicious code in godi-tufuja-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bd0c5433bce51b3cf0513a208555bb2997e44a567f2182be132bbb9550d8da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178086 Malicious code in polymer-rtte-tesas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19558df7205511ca7745cb60dc612a66b787142fc114a83dfda55992e438e8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177412 Malicious code in poglymer-ogmimh-avgpag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8545ea561a27ed3c9cefee3e629e6d1f5ec48ac64d8043c6ca8097ffefe7e65e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175592 Malicious code in ksai-kaiso-ola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab2efee687b5334debc51f08e434fa82615b72fec135d1f6f450d53db3c5cc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...