EUVD-2025-147013

Malicious code in uinsu-lis-amudakinbu npm...

Malicious code in manurung-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118e93e05759099e68da5911a4b73a4605dc085e3b554870dbd0c6b061af11b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f177e27bcc87a709e665deeb3b05d997da6856d91f6d02c30d215fd4d28062f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugi-amiatanamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0396596bf4aa09788e4b5399f8e1bb0db0b320158e981ad4470f1c01e6cfd62a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10e2e6f969ad1b968f6de30d4235077e2ecd23c20904ea1dc6124979550dda49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotmua-anabzi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a86d1a1d56a99f74e6f080314a90c06c2fcafc8440f645a05461aeebe0bab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nuyasfgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f023faf4925d225e4706e23fc53e49be9fe3c6c1ee23e9acf8a999009da587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munisdr-naserf-misn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be046a3a4128d8d3093aff600ff73644cee30510897063d91503dc8720d827b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72be87ff647c944d215ca2b7f510e72036c8e3dee6e270776c28c43c28c109e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehnah-coadifad-musrika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca023883d802e11047ccd094461702fec75b425449f7bdbf3fcf295ef4774fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6269bded82bfc667a68e7bd80ee94dd69b3f4f461e1e69cc8b01bbd6dd48c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/vefp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b995b9b514ed80e537ecb6b694c9738836ac70a23900d20c88784ebea7e2659e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sau-naki-iyuulaaimuap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c084740314f8ea02c65e1004f4eabb308b0b781991a1a1c702985af5be602232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80e85a42fa52629730bcdfa4537a368ed5d950f02312cd8fd149d63bf312f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ota-uofigapfuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79316b7021ce66b05d2d037c876593cd71293d3367697f34409dc1986c852c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayica-amuinadabuhua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dda832b535b3cefeed3387a426af08f428462251496f6f53a4f54365347cad4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabu-nali-luxfgsfbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af3dec73bc8c8746089ec43282958f6704b31e753ebdc4a4979fe40aae3b03a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0acdbece11216d9e2fb4ba455de5a6648246332116711dcbaa5d327f5713081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec7ffe77bd8ce67cd468e0fc78353a41feea147d985d878e94267bcc2f0ec06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyikula-nioybanali-lauyubasukia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ae39672323b421c3f6c4f4b4b89bfdb5a40acc8668b10c55e8f22c41acd326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...