EUVD-2025-142011

Malicious code in goodaan-ngafsa-nfuagi npm...

Malicious code in kupaio-kullaa-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb55ccf7bf669ba76fddd49d13911312f0ddeeef28ef87d50ec1479b5014336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutaufa-guivoavog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607f7a6e3e61b54819b5df9a2d886c3038f3a0969b03f14a36354b881f057951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodain-sanvgaunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d3ae7e37f89dc4de1c1f358b4fbd2856de89c9de6fd8fb57d089d68bafee18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah20-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d469586b77d569657223f8c204a911583c5506d273774addaf1680edb0ec29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gafai-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 654f6dfb91b675e52ff2e211bf0b9ebdbd512ce1d7a44f7f3b5bbfdf6fbc8b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudufui-fadabida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0abb9835d99545b9dfe1933ba6b48c0f7c5f17c6ed0783f470dbd6ce0b64c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-ahagopgaafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66112974d1d6ec8fa4dfee3e40873ef3afe5bf6989fe3c2037996d9de6cd44d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b988e67ba2cf964e468cadd89aa148131cdbf05eca57d5352f7293bf1d6bf457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfaui-dufusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67be8c319bc861b87da7fa94b9c68507554c750759018fb978fb05ad27bf95be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be38d1f789798a2a7aefd55c3ca212eba2ef60d64f2607c8c4f339cf5279e9ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-bafaaggsig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9050ed1093c1d1bf32151ded226884378a67a8ce7c8412c05ebe58e28b884b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-hali-misaln (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1120acfdbe240a49704c6ddc060a43b722ba643786242bc7906d6ac4357326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmiam-raviav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37f287a621d3652da96ba813d668e9c31d6667f7d32d0c8f8a2a318f0cc14371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiva-tumva-dialu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da4e726ea384f811221808315fcd3204d87702fb07ed787e49061bc9f4956aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-id-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 552229e2f5e7b2dd80a5991ecce31289fd7eececa58ed576a47ff227a1659c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soi-vanbds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118f6b3200466c18f18b2b63eab344ffda6731da8cc614edfd3f876c42c2924b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satigoigof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71dd6c09245b21364603e267e3258505570b6247d9d8fb66675e3820e793af5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annnneh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08cf0fe4cb167f08e96e2edd0a9627573d40d2ee2dbcd784688c767529ceeaab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibga-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c465648a55ed6a25186807c0904850572dffbc38bfd2b89ed4387a6aa9d3ae50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...