EUVD-2025-81372

Malicious code in linguisticrodentdumbs npm...

Malicious code in quiet_ocelot_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80c06eee7ea35e8a976f4c727d1a1afad131f59394387e43ccabf88e44471cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moaning_aardvark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9156ece58cba6f206a0870f64feb80f952598aaf5312aa6171bbba9cdaff058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic_bear_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da33e7179b85a28bb9ad2c143fc9605294b5ec821440aba40015acc68763d6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100394 Malicious code in chosen_planarian_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3151acea93883e4dadd06d3d84d4ade582a88c1e58657f2e31d6ef699a4fb834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservative_woodpecker_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96193b2885702f70b921472720812460a94b681b7d8fbbac84b37f3fad5b8497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stewart-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3254f3c7cf8f3d0c99eae5dcfc1049a9e458f7da8ff334532160e12363a0fa88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genuine_cow_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a9dbbb776355f1b086f385fa6cf2439417808da898c6900eece7182e6fdc3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fun_beaver_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85c9d7574d28b5670c0e3cc995972c2a9855335a1676a336879819b00b2fe609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental_gazelle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ae006c1362cd311e9d3d21a2140efebecab168f631cdd85abd20aa9733e491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striking_mink_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725ded3e797c7daedbe974268381e1308c59f7c06fc0160c80372aaf2661309a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal_coral_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1b51296350d557aab988339e6b8ff518117e1df04b8c87c4604414902ad464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wandering_rattlesnake_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dafe83039dcdc2f99e966cc992dc3926754bde434bae969b290fb2ce2418466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in economic_angelfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25d228efd28372e5502aee98ad04592437dd453534ed6d3566c81f9edd7fd35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved_donkey_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e152d683f7e8014bdf061f3496c39b8cf94a3f78fc4b7ca2673492d3953b3d2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mobile_kingfisher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5b439c615779e2d41ac2b240bd5989e6c02d1f307db2b3474afa3d7b17a49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jealous_aphid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f430fa2f390b47b820fe71e90aa10ffff529d2cbd8a7bbd634ccafe6b191b8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104767 Malicious code in key_skunk_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e170e4a26759717b01e97719292388afcbf6a3f1e71f5e236fb18ac7c2dc3ae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exceptional_xerinae_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd92a412d8c44f114150735ac92509c1a3817bc4876c524323adbb36a86af28a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kory-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b01cdea5be9930596a769804a8cbcfec870f08dd738089ef268992ba5b8306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...