EUVD-2025-92858

Malicious code in cici-klanting73-miaww npm...

Malicious code in sinta-enting87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 296dc48ec260ce66c3f4ed3911b04db0c92b0f49b561c0fb250506bbfe9852c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poised_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1794d2db1b4fa5739d335491fe59b83455cfd69088857b84d111a96bbdb2e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-klipo82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d68928db0d1e4f3be8d06f55f1a890564026e386cc4babf06d8405e87722d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-bika51-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab9c4f9cd65ff67a72a1cb53f6e76435883e2e1c091448d42ff7ff8338ff7805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-sasag36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2453e68c8f0e6a8d765a0a31f3f8a1ff083b611d0d0f4613bc7d9f9a31f5e738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-botok24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038c3fa576b9baf6da68339a85cf7eaa7b7b76a4b1491e8babfda7dbf6a381f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in different_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a723c09b71258bb63a911121cb2c000c171978e2bd5cc3be8ea5c48ef872900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in social_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b07641448ffbdec201330d94853a253e5888f0fbf8883fdb77fa6ec76260aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-taiwan29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5800f387387556250c48c8ccac8c38a9067d16ed206675db816d147f7485f9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-keraktelor89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49121b2598aa1769506cf01518495adf6458b0f40ac54a202bf73779b138bbfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annual_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0afeb299c7b514b29b5e2d314086e760320e453d3f1f08ce9daacc2fcae929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-enting43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21635d7fdddb67c37194868909ea736a64d43604005ddb7a92bda617843cf9c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-dradag77-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f101a975ccb41eab95d96a5ee677ad186ab3e22b4f6fd5ed48324845255c10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-tempe67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3654c86f1c4f5471cd80e3a78bcc6c589b652077e460a4dea9553f9c226df6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promising_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d76efcef6b3087296c418bf1a30355b063f83bcea5a143a9c56c4b20e440609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-lutis66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5d63359651655d1daab151e7a35f42cf95f53e2718fac4fb4bfe47fc81a654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gothic_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e69fe56be956040bcd7df027de63d8428a98486626b4908404c35d2f4541e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-tapai79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda8e88ec1e514753718c83bc469fbc14db3547b1df3a8346a288cb74db346ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f2e8fe8811faaf09754ea3df9d64db92a5f802bfbd7a9be87763b0479dd09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...