EUVD-2025-67821

Malicious code in patria-ragi4-miaww npm...

Malicious code in joni-kue70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b3611d65b39d9f5ae25b9bffbbb0dc5e8aedf5c5f63665851a6a03b3855206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-mieayam47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80bb8350dbe5e68d2e134b1abfdc85dc67d74fe0da90c3c5a2bc2dc6fdf4cc0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226b6bc4e626bd3a1e38fed7760651bb2e013d4360fbddc6548866d4ee405834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-gulai81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4889e7c6878f5d5c76e984ec0beb4d90e4b2b5dc3a3bd897da7a1e6e8540c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-naget43-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31a96875621945541b73cd0cbc0ecd1fb1f6851b71b2951d6b00c11faf28f66a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7cb6fc0de3c8485512529569da81dfe6d93eab7c6bbae48ca0ee7ed1dcbde9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faithful_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 351c4d6add695be8b8e6dd5c2dfb22f3e5de93efb310bc14ad495aa26c664c6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quarrelsome_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed875cd9bf82e2bf62d6bcb813e969c10e589415e537bac41860e61262dfb75c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-tempe87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b9af7cc00bb7e63baa9c611b3e14731d927eb7a1ed8ebeea02d93a63bf11ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-jus22-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611b4e1c777283e5c541542cd598779899957113071c4e125338041133e1a61c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-kripik61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd08f64c5cddebe24bf93d10b78f2cb7133d526bdc2203214ab6b14c40f2e288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-kue16-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e33bd9a194814083e307ea5efb48c4ae85db0af1b2d87fd279b3bbd29f0cac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in environmental_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a2fa4d57f7d4cf3a151f000363fe7db23912882e95e2c6be94c68d65ec5a3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90089 Malicious code in rifqi-kue82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f48bea70786f6aa2156486324bca15d8f6d9c2711a989a77bfb418e5d83811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84114 Malicious code in citra-mie16-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c99000d7c18fc4af43331294f51f960b8a1ebcfe7bc13233fc7cf12a804353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90353 Malicious code in sari-kembang21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b014258a46aa2c6d6765dbf221341f524c8cc97b8724e6f9062fbcad1003d177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89510 Malicious code in previous_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956e64673d16ffd06a2b1cd51df32167b4fba7850554b5db757c2afcc255ba6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86815 Malicious code in irma-rangi23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ecc86afe1832d30bc116ecdc2802efaa8642508741768451a279c02d2a391bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85728 Malicious code in galih-empal57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed6beec4916f25d4f23466587dc3e0465e2fe6f6035f8c8319ce8f67ed01d970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...