EUVD-2025-88884

Malicious code in secondarywarblerz3n npm...

Malicious code in biological_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0c70ba96ef5b5512040afce38e42ff78a5d0bd9653123b1f77a16709049987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-empal11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4678af1884093d81790716e63ac93089a46964429e6ecd32ec7b71752c751b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-kolak74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e08af51bfa3ea2a9e2e2437a4d60672e785e9e76729127d4c2ed417e5174c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xeric_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e76912ceecc04d4aeb6b7848eaa39a5cf5a20897a6b2cb3953dd2d88c14146d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-dodol36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930cd5a03beab4711965343256bd875fdae7ea859c946160e21a63a6058511cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-semur78-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b4d04aeabd02d8010e55b51a7650b2c7fc6af5224b322c610b63b6f5a5eefd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-kepok67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada995f0a52a5e6da5f2ab4d68eaff6a0216051ab9688c36124863aa8df68d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-naget18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36dc2ebe07ea73b407a3f6dcb6b982df7dd56161ae5537412d457c867d02ebc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-miebogor33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2170741669261b27361a5269838086b8cdab8a5c503bc065c1bd5094d94cb8f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotty_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 182eab98e3a479079a5fa1e654a97e167e9e17c1b5c37be08b0c857f9dbca0ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e613eb7b11cbf83f0192eca76c19963666c727d38248ab18a593d32291c826d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-kepok56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcdc0dc9f9061c3397c03f838ac635d6a55fe15674abd6010a30de59d1e22f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kupang66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5508d2a84e22385f541e62f56ad80942a875545999ca88c2baae09de956a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-kembang100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad7e80e8fa37fa8e00c0de0c3da1b2a89036b2e2771602f1024ff48ce22d3cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-mie12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791a5426af2745ddb2eeb65c543e5f3b91775e2e08f381f5a948ba769c4e0146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lonely_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30ef75eb8c680ae4791a21398fe0087a5d9234ec374dc7ccd671ab070ec6583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annual_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0afeb299c7b514b29b5e2d314086e760320e453d3f1f08ce9daacc2fcae929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-nasiuduk66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afff8279a94bf585f2f11372a5e2e6cca0b4c0018f6228d55327df57eb280ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-bubur93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fec09b999d0c83de7332c79f094dd197571729d219ea3ae674779643b70c315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...