EUVD-2025-134998

Malicious code in zaskia-poke14 npm...

Malicious code in kapvino-sofgdi-gaogfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba14fe272be5aacbdd53b38a43f40a3e0649cd5b81386cef52d28d4774b801b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426157b02f97f1d5957632904c226e5fe63f26142f598d4ed5a9774b439b429f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-brdia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870a3422c44565054bda1461a5871b05632650ad3e87037c68415ccf367e8ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f8aeb8d6a8c0643c3f19c3b9458fb53189fc9b0f2fb13385e3fb295a606ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174290 Malicious code in goodaan-ngafsa-nfuabaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43a485b2da2542e11c8da2bd046ada6376e47b6f97217a8bf0d463303e6942d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176470 Malicious code in nokire-nakaocil15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e359e4a021a17ccf9bbbd89f76bad026ff8b04a7c6d0661ffa8c4121c962259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179113 Malicious code in thambi-vsbers-burtd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62cae108d8a2913ed96327d6e1cd6e46d6eab995df655774bb25460ec5d6183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175861 Malicious code in lia-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9491b5ce9874eac4f7e7f194f1aec23731569b255cfa7a3a10b7ea37afc5bfc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177348 Malicious code in poglymer-ogihh-aggsifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94dea6e8d7dd436388ecabbb6d1bc225e5dea8d6ed775bac1074b33e7cf90c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178480 Malicious code in sahu-sautg-infaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758f641d7ee4fa83adc866a511271b4db4f2055976aad53cefaa83396be4dcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175007 Malicious code in irfan-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e76283a5a80703064e8141a2de2fb79e83c64c3e08d7f4a72ccf032a2adbab3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179298 Malicious code in unimana-satgub-nainab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e088aa01cee90726df8eba7accd4a8b28b8f007f36d46ed1deac675a9589d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172856 Malicious code in anak-jalanan-mdn46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d3667af89882d5cddb35ec8ca2aa4856afc116798e0b436c093dc3bba57dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178261 Malicious code in rintono-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22bcec689bf541b9955a12713b9d3de5741f9756cc7df511a72e50f712c954a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175355 Malicious code in kapvino-sogdani-odgafdgagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a78c98854a9a88186ae0503c64dafe8bfa1ca55f63b51154a709e4ddc7ed17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176187 Malicious code in mubafi-sunai-caig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eeb5bbdc11d95ac3f897ad6cfb65e8f4646325444800eb973f09a0e0f74bf81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176599 Malicious code in nuilva-avmiam-ravfonas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25525091bb8815e14cc34f8edfefd91b9bce7686521933f4a27e98805aaf63bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176942 Malicious code in nuramagi-sutaf-daugufuida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930babeb1e344c4f3182d4c3ae44a8c53fbb58939468a7d4d37d21758138023b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173454 Malicious code in buta-fippnoa-inaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77936093212ae90353284e914fc51570d4c688c27a7fd3b887d4b3d53b110c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...