EUVD-2025-82022

Malicious code in ethniclungfishreplicateautomation npm...

Malicious code in few_kiwi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fbcc59ac3ae7803ba4b566a934cd7b6aefd9e8c423f9ffe0cf9fff218b2f493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mcgrath-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f455a5bc1ddcc9a873bcadb5c806a6a764cc21f2cbe4627b6ba6e168a44f775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_lynx_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f938b8399ed23efa9d93c51e0b4c789f05448722a0c080657cddaa7955c1055e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hayes-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42d4e0182dbd3cd4e3f9b65b68d0951dae93f0be3d9041ff92a63c345de2daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miniature_marmoset_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308459d2b51bb1cfa5f3eaf63747bcc2fe8d9d517bb33f93f689c9a9a2b21356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_raven_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a65cb2eaac64a6b2d1d250555778b606ba2acc34bafebf698b10a6c2609a8d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electoral_mule_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3751fdc744a652d7ee0436f488441937dfad71274a89214232b2710055f5ac48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willing_vole_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c490bdb2fef1d00af36a2c35fdc697a9e458372630a612fdbb65164b136e94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in watery_damselfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93c33e374b4eb9333a4963e58140472d9b89e0b5e2f754fbc361fce01ff9316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82270

Malicious code in decentsquid0xrequest npm...

Malicious code in shaggy_cattle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1a78d4197fb77fb1336f684339f6b403e9c9de06b734d382be11ea25c84edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80370

Malicious code in superiorguineafowl0xrequest npm...

EUVD-2025-82591

Malicious code in broadpig0xrequest npm...

Malicious code in smiling_armadillo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aed3535fd15c96010e4a7b9e471d128d8006008f353134e0a5c50c2cba9e9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sore_mole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b0e30cfba28bcde9b4664c0fce6a323b3201dd19c0af4b1dd528efb876914f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling_booby_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa7a2382e524fd0dd8ca5ab81aacbdd0a5b7dd10872aaa34463b2e83e61d993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle_bedbug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78188bc3c1b2ac08724db2e7b74e0224f03c73497f6c94eeb09083bde18d8ee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82516

Malicious code in chosendragondumbs npm...

Malicious code in silent_prawn_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1585d62b60fedeb0762ff5b840fbb85a8f78cad0d775e9729a3d5b7d1a389d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...