EUVD-2025-141465

Malicious code in hunim-satsgamf-anuafai npm...

Malicious code in kim-jiwon-me (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09000f631a615d871f4787e2d3082d0880daf64c6838e85a632c479379bba9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafsa-daranusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8bdc1a1c80b1625c39e96843c91393c91526d48f9a165531bb69696ecddc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipmgaofha-hfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f04b7205dbfb00fd548be846f884623a4231064da4190753e335aa86bcd924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufbafi-sufafnai-cauabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2dc65425f216851914c45c57133e35acf318c4bb622064f74906bc7b331cb34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adair-biurn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd97e3103a2bf5971ae1faff53f7b158931a8c32ea29694728d4e248671d4e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 625629c2c2ce7e4171a991d5149ee39bdf290161a89d6ef0624657551eb4dff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136352

Malicious code in sgoodaini-ngsa-tufa npm...

Malicious code in indah-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 578db9919c26e8ac0c995e586ad4f10f64f3128b4897025b1c347d3d8ec7143f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139922

Malicious code in nokire-kushina20 npm...

Malicious code in unimna-satgb-naiagunubis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54378ffc57abcf8fd6d7544deac1fabb25fe131decd39a11b1625a88a4d65c37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175661 Malicious code in ksaki-kaisom-olomalao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 712d1385d88ec91f5f5087917d32a126021130dac291f46b688963c77293a9a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176523 Malicious code in nokire-tanjiro355 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4467f157f340ecfd13a7ecf208bf4a136ae5da221a59fb4bbff927e5e2b55c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175435 Malicious code in kapvino-sovni-fafskfskfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf941c78e3cf87c4d7524724aba5abdb1443735b38ad5e12ac3daa8d1ce25ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173672 Malicious code in butanaih-asfia-dafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34cfbbed0d596eb7423edeed8830c288d06fb6240b2ee5ed79ec7fb7f14d7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-da-rofad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e78d564178c624697220d381bf2ba996dd8ff3e0078bd713c422e92f55d1f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136521

Malicious code in sahunim-sat-fadabiu npm...

Malicious code in thambi-vsbers-tres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ff39d8d33f471fd197574d627d66beccc8d58e20a0435c0e12f68839a106b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afia-goafga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278144f5242cb2646164ed63a8ae9d4cef40edcda53a84863d3ffea20b43964a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1fe4e13522846ed5eb5c9124585432e6a0f137692b9e1f9392c9f664fad1054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...