EUVD-2025-177598

Malicious code in nightwatch-firebase-janus-package npm...

Malicious code in centaurus-neptune-css-loader-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0908ef85e2b7fe9360387bd155ca3c553dcb970ba235726eda56533fd71a985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-cassini-lyra-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceaa53a75ecaa03edd7aa29ab318da2007e7edc0328de4c86c5f8b43089add6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-oortcloud-augmentedreality-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1be6fc81215391cb9e6519837e991bedfbd60da09c93eed5f1cc8fa4dbf37cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decode-export-data-cold-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd9b26936a91296c9761c1dc1f244b37d89f7f0d0479753627dfb42acc4420af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187169 Malicious code in geomorphology-fermion-aquarius-oscillation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5dd8df67636856b60e86272fa741e198eaece85c5f95e6c79aa5e1235b8541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190186 Malicious code in vortex-enceladus-slides-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459c37c88702ede938d6aefee367e7cab529ff9cff4c09b2c9bd4ea0e63730fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190055 Malicious code in uninstall-semantic-ui-await-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d54cdc877af56ca1cfb7dbad3c96a744be26cd760c76bbef5ee6ca64e03bc210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189711 Malicious code in subduction-phylogenetics-tachyon-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d23e85fad2795bccb4695d01f55d114917b907a7cc918c35106dd514064a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188187 Malicious code in native-transform-nightmare-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb8bba835dd74110960912c898ffa95ea4d8f290d3a2df21d8a9f8d597f9138 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187488 Malicious code in inquirer-loop-airbnb-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8366fb7af261b96acb44c44992384f7e1c7b11ce57f40c11ab549619a5a443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189536 Malicious code in slidev-odin-charon-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a6f20651e71b9191c950fc2cbdba6720c98b9935f61ba97cc07e440604538e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187763 Malicious code in less-radiometric-hydra-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc59368ee0d7cd8aeb4f95689e120819ddbfff2c7c82266ca7fb17267e694aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186807 Malicious code in eridanus-geochronology-element-ui-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c70e6b62e3a9f2699ecf4f192f3066aa1df8d5e90541a43a39c446e93e35fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187833 Malicious code in local-ariel-elara-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa489e4c2ddf5f4b238f4e89d02e3d3631e672743ec0775984f02753467568d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188393 Malicious code in octans-sedna-entanglement-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8de26676b02acc15c835b2db1cbc166b1c3da77c3fe9955268f44283710cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189993 Malicious code in tree-notify-fire-resolve-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58286446bdb6c6f5f5005a6bc809b0344a781e5d24164ab1e56e1fe30e434940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190274 Malicious code in webdriver-mocha-nightwatch-cosmiconfig-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3cfc3b8c341c20b4e8af0757b87d8eb021f0af5c7c338267d8024659a8cd03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189831 Malicious code in taurus-request-hyperion-subduction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805221cf5a62588c1c2a9e61e0875d0fc1e09945259c7a29162ba921752675b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187095 Malicious code in gammarayburst-neptunology-helios-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1639aed73bc43db96f2914d88cdd73979fcf54d713614aede5317f2945f3d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...