EUVD-2025-117291

Malicious code in interesting-tan-roadrunner npm...

MAL-2025-138814 Malicious code in international-copper-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916ae4b0421509f4ca33a2a4902c5e06743b2fc8024e87e93e03c921007496fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-tempe52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475394238a040702da1ef1c899c4ee3ae110cff86a579a1b80a37fd471fd2163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2ef827607dccbc95973e69f943ab79c96f9d67ef4ff0de6bab22af7f6d336d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rotten_hedgehog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa4a73476d82fd1d9de3218cd1485d040f4221b8129194b023e90f4f7cf2ff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-lutis46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3e77f03e29c5c60c05881b46ba0be561fb3f118826231c55236bf1bf2a16dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a44b86a614d819c5f4585cc067ac70bca6781441f1d9e5e4f4b6f58ea6e5d3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134360 Malicious code in integral_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91eab438ef4c77e1cbd041c0ad7b5adf3dd14275dc9ff777d0595058a534622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138037 Malicious code in wibowo-kentang39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5127b4ad1975a085735044df86eda46cdadc05f3f2c4b5a9a8ba2d202c128772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135254 Malicious code in lisa-sate15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6d25659c1ddaadc038e292ee2878fd70d31cf78a28b2a0b77236b8ef66d9c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134128 Malicious code in hendra-kentang1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711e1a19300a1f2c7e431f99df059748c0723f3ec7cf5ad4bbff0a59e202ce0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135488 Malicious code in marked_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c683dcaeb253e3199ba1d2e030aefb51f161aab335186936dfd012de9d9ee932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-soto71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ab32484d752f9dddbf1a533177ff8ec432e925dc7f4587f166e0377421b88ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ef3be139d89a4117b9f8829f1da0ed391485d68f40dfa4e7d49d412be8d244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133939 Malicious code in hadi-jus54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6e10f8f1237be16fe0d00556e34d049653816cfbdb032cdda530b295560123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-ragi75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04906251e1939914fd5069784b3dda39af3009a599fb4e1eedbb028c789dad9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in philosophical_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec709fc7b6bd84a85b86b21f15345453a00d9f39aa6512db396a6086b66fcb6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135508 Malicious code in maya-kripik42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ad47a78c7482dccc545732c721cdf63e8f07d16b000285ad168b7e0acc6250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0a7b9e6ba201c7bacffc22d028d9ffb1a53eeecb16fd421936d445cb81d692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-gulai32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc845967a01f82145ba5966c9c8ecf87062833483f59b0e9a2d04300d6888736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...