EUVD-2025-143734

Malicious code in nabuf-otomabin-nojaggu npm...

Malicious code in suharta-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afde26f4ea986bb9b04b87724db7fcb5d8327ec04dbd6bc9379fdc9923349161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fuhopia-janiutabsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ccc524f46af3abcd5d56303f4b9e4ecdc75e5c9df19e4066b42421558506046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokiragne-asafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38c7d55bd357a512ba67cb18a068ffa8d9d017688e67170513bd9051ef7e318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbian-nuyafidistad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1007c6e7f5b3c635acb0d0e0748868cba21f57afbac7806b8ab7c5b3e9d652a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f77f11144437337a823c98ecfc2d36e87c497a6cbbdf08fb04f5f3594015f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanai-ala-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c36ecbc4af419bcc63b0f62a19c650cade5dd1354443b6163fbd1dbecb6127a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf003d3e14cdd6e34ac865f743034379a2efc6ff3c74af26a326216bc847a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-goblai-januga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e98ac6d578017a00fec8a73dc39a8674298ee7750f28a1dd19e26f44d158d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bdee9a3265e5e25f6daeb8dfc83831b8f193881a5d1185fe165d3c87b0e8085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gaasd-19s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc99b4e82d2093f9d0b898713d44d320490eb2057567023475623b1de361f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuna-mobni-aymsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59dafa57d388d003386c5b92af65d5bd4765ea671435f3befb06385a693fcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee69a64086d8733653dc9569d2e6bfbf0779033482997b5a9aa43687aa85e768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-milipe-apmuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5966cc8a756506d3b3eda622a1cad98e27483f9c91114cfdc35e9a15f4ec66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magu-naika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2296d0d429edb82e356edb6ead8411979795b002049cc2df0357029f63b81555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfda-murif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7babedcc10c15b1e3306c787f0a560de1172bb5f0b83510184a23ae9bc1898a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jimag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc04eb44ee43d755bef265dca6e73050e6f0673db7f117e07f932ddaa28fa97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muny-boph-nutrui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd314bf5337c96a95c8023cf132e395957e6a691e8cdaf87a810d6dc9921378e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67b228c4a820103082343947cbc43604024e9cd9d40bad8f23537704a06441c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lkumi-kunalanikab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540d9aa6bcff644181abe3520938ba03fdc2fcb7f42eadcb84850f3c9f3f159f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...