EUVD-2025-177302

Malicious code in passport-scripts-blitz-antd npm...

Malicious code in css-minimizer-webpack-plugin-hermes-spectron-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8dd2b1b22f82ca3c1eb2d83c301404fb836de51f9c33128031bf6be4145a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190254 Malicious code in web-container-container-sigma-optimize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f4e0c5360c2b3e572b5d6ed0ee2e4021c2e71ae32acc87dadea5d19cf8656b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-toml-despina-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e30ea46b93efbbe7455150310508ae764adf5908598dcdf07232a5262db6eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186227 Malicious code in command-axios-asteroid-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180631d019bab0da64cf4a5f147075f13b45f0a00baf1b63e034c9f47ebf1e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-sigma-meta-daemon-delta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9814f634f331ea15ee456dadfc2e7f1468d32fd0e4eb9ef64568b3b1466cec6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188322 Malicious code in node-sass-nuxtjs-octans-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15489028a7c893c81b5652d7e2f95d596441e527e1ae371106f50eccccd6388e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189516 Malicious code in sirius-lynx-antares-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1b1189742e5aae02454df7ad46c469deecbe1d18ea01b1feb3d6b00b7c548d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190445 Malicious code in zenith-cladistics-plutology-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e4a78984349e9b233c2b9c6774a1bdaf97c0dab19c4ef6f0adec068f2c6150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-bellatrix-superposition-interstellarmedium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1342c69244da654b3900d26efb403b53881ca8917a548d692e0bdd73e2e976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186776 Malicious code in envconfig-sociobiology-palynology-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07d790c19fec614a3fa7fce75301a2098fa1836a6636b282bd014f693c75c8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-testcafe-innercore-planckscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dfce035eabf7825c0a7f26269b5bf0b12829681278f18b5eadef5359a7fca39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186223 Malicious code in comet-publish-palynology-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7e34a4137722c68664332cd34c502192b118ed77c8083bc8e26a617829ffe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-markdown-iota-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbfac5256294b4858c1b93f7aa1f371d7a3507cae5cee54e35fa90d09c910e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185404 Malicious code in airbnb-arcturus-enif-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f91b89bbe011b4d3b3e04dbd89e0385e56a2d993d744a9408364b5c392d2b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188637 Malicious code in perseus-xenon-grus-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3dba22527ed8f27d29b6a277c13c56373df6604a117eb21a0e723a31111238f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188635 Malicious code in perseus-vuepress-hydra-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d48f0d7a8566a862bfe61b11b8118fdb2cbf0957a5ccfa1f8038789745cb5a5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189475 Malicious code in shelljs-package-writable-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f60830a143e445f6febb17ec8af079069f1883139d63dfad0461f1d08e9008a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cloud-star-parse-fork-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8952f1c640e356dec0fbec116b2f433817d877347505c728b5161b584a49ef99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187275 Malicious code in hapi-dynamo-archaeoastronomy-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54da22c800be5c89bf0fdeb32b9a7a594ca11b7090f7e046112643b481591db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...