EUVD-2025-136249

Malicious code in itale-adci-gnyagibhghygdfbdyyui npm...

Malicious code in astam-ifut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa5f02ad1e2b71a6d5f1839c4bbcd63ecef37b51fa3d0a4e1426575acb9d760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-gisostsiogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7075f1b2f307be2b5cf8c31bbb407719d74ceb4b2789e975a00f062b1359c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliuka-tamonaiki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f919c59925c188412c5d944fe0089f7a163d2a01486ffac807ab5881acb9bd87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5093adcd512b066dc9b1a6b6ff139c73eaee5a43aa7e6375b9f3e8e24b2d37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dniemnfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d28012f9ef6ef563ae4f14dd05da3c10dc53d81950a8c07e0f04d09c82218a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fugiugfaicagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c27d9dd0ba72271f4efbee7ef3c2f4ef60ca65d6cf4449ea08c0dae8fac4a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeaki-ak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b55cf4296f17a024700d1f446ba4e41a33842e49ce832a6bede0b1b0c1c25661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fus-ugaiaubfoalfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9176e6b4106b16f3c1e2080f7886a87d3edf3ddd694fa5f0dd054eaab7094ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d8944987f8e62b9b4d23e13855db4c380e4cd57bba6842aa7eafd2541ec6b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dabuakaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d4addd2ad9502407b1749061c3dbdad9187f810f75a5d3c53e2ce554db6062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-ahagafujha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388f00ddbe21e1f2fab54d667f3f1de6059655a31a4c380d667e03f87c7d7f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofy-gaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba413077f43483904ce6705b3135d97caa8e59df8893abc12afbcf6a99484018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-danugamicafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd424fa3175799b9720dd7448fd48ea5ba2796bbef5743c4b335ec2c7c7f49ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-baiucaufabiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8f5688c2914ffad3f40e1ee5a781dc92fb59dbb1639935a8bd4fd1ccb19bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-afdeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e21e5a95f3b6fcb63ab7794df75c7e8d99acfb1bba092b6f2f8841be05e733d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaeeaefededefredafafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f017e763010ed3ccdb88ce8d4c500acf947e187a33a4d64b0b871075d0108c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaisugada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c38a64b2a493a63edc0a6bef371cad89da0ca42a94591281245415355ebd997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-cafefgxad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6405bd3fd31bce319776d5dc6bb77430bb28f433d03168fa72a7b447f014d39e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3027ac5998a588da559c0fc7afef70136851acdbe198ab7346b730e4f58ae7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...