EUVD-2025-140691

Malicious code in ksai-kais-ahakaoliaaji npm...

Malicious code in ananda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b439ec9e13dda10890f4cf1f15feb7a2c9c43abf87bd17127d7029c22d800e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoafifa-abohoahdfadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5e8214d0889092d8b46662cd7760efa030eb37af2f94686226839d0582c994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-iofssn-tersd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fdce4cbdb79cf19ccf953f9c2e3fc96b41c057beda8f846d11ba8700331976f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusiautua-nutgagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0440aee00853a9a493c7a14c5b5dbdbcd5d3041dc2b2dfb39c2563b5d18bd885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137371

Malicious code in polymer-tuio-tesas npm...

Malicious code in butry-must-nirta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4bf4624cad06b483f4e268174353bc5e21b5167139b873c10c87addd7efc061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abbdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8769999eef7765c6168b9cf1f19a4c304728d88c42984d8537bb684edbfb9ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-vgg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2fb2b7ed28f1a3884fa63dc342221d63aff4600fd6aef0c39d207d5c23366b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimiabai-satib-nabb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88c9b9febb07325d13e02198bd2ca25c7471170bf96d9638fc93b384f67a1910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-fari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c4ac0630e581dbdbac200b6893ea64dc9595ffd0f2ebf1dbcc54c119014de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-sgdasdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5289e5e29791b66a25aa4572780015a9eb8fd6adafa8558bc3e24a453991dd05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manahuddat-ma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3de13d54ba9842e6d52f3da49c6c944ccad04b31de8f5a2ad44f9ae82e6955 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufam-iunu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f25e7b2d1102044b8522042d555395dffd16eee73d0e1f1e4afe21adb34b335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-madibavacvo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a0d410341fe01ecbe1933ce87a3e280406d0d77e2ab45c9626f8836e5e8dcf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 042018ebe8dd474c23147d714f5b0a2e883b4c3b7b9e19af096a75dab87e577a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc018302a1fbc22933a3c76a97a7f8248b8326701c30d629fdd213059cf2630b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daarde-fagafiafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82b7b2a1a8e1277d9e1c511cb6b627c36367683228c82839ca71e7935a0d029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soadffi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb2f17b38d69b92f902e7e738f4dc2183646f5f50e90260369b53ebc0b7ff4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samnvu-ubdvabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5bb16116d64f43d69c2d674feb87a9f32b0351db6c4423c578043de0ecf217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...