EUVD-2025-140155

Malicious code in miftah12-miftah npm...

MAL-2025-172775 Malicious code in alvino-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143038eb894ba6ef49979d6fdcabd21de2e72e981abe4293887d3c87c3549ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172923 Malicious code in anidata-hapdits-risadpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dcdfead17df48ebe4d556ddd0d78f3cae6779499c6ece838b6fd529317ae9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176108 Malicious code in miftah12-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feab06f97d7e11742e1497b0e54caeb83ab399e4f836bc85488d19d9e484504d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175849 Malicious code in lia-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83839eb03b1027d2475d13dcb178480b83f1d6e156ec626783871df6b982b85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175628 Malicious code in ksai-kil-koki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad1ed36bf7ffee710d9cfc80e9ffcc0e80625ee4f1a83d27149346aa7e91d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175447 Malicious code in kapvino-sovni-farvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee891e0db4b21ab22e6dfdfee333d319c16dc4134ea9018227aaf04f4baa2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176588 Malicious code in nuilva-avm-rucasivasv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2dfeae5d9812a272117c1e717225a8620b43f7aa05e94e6cd9e50f1ba4ed07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175810 Malicious code in kupaio-ulokia- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8812e28fa4c2f11eeb75cba960cf3eb2fe74a44780ba4e5552a376d54ec0b87b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177792 Malicious code in polymer-arash-millio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f838470e7c6e82a8b18dc6854bab4416b79a81276510daa30309062538d145a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178068 Malicious code in polymer-ids-radaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b6f1114754248aac2b78282269500c2132fc98895c5bef352570059419ef3f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173543 Malicious code in butahu-asfui-dufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c3894b2b7ba91389c3beb35484f4d8a029e339adcca92b922ecbfb731c0f0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172688 Malicious code in abdiii-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7100656a30c383e8ee6775e8a8daa77372f27e22f52a5b9e8481b54a357ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173421 Malicious code in buta-fioana-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce44c125f2b1b673e1750ab63ee5ffa15deaaa5b8e4e0447c330023f9f089dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175286 Malicious code in kapvino-socvnvi-bofnvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ea0e0fb6b11980b81d7a8a5eb1ece9fa3cbe45e81ee2cc621dfb7287c33054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175058 Malicious code in kaka-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a929c2176564a4d33a26cb112ca9119f23b3f11d4a9ffbbc1de803f0429eaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175975 Malicious code in manusidda-nusadsta-manudida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b1db4e4f591048074a2eb9e160625ca2a4986258f8b07c92418e001e17aa8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175398 Malicious code in kapvino-soni-farami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7b81767a3a134b9d74bd45e14d69644fc64365a7cc859dfcffee0ad858a8a7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joee-banut-imubuir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61dcd491545d0f2260dc21363b5891c74bde98f8fc423a2353cf2b9eb2fc54e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176871 Malicious code in nuilva-vmiam-rbua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e6ac2e88af9d360c884b30a022c28539fd411bdcb65edd462b5e24697a536a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...