EUVD-2025-146530

Malicious code in verify-aikun-misika npm...

Malicious code in nasrul-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ff90478af98dbce70c11c0dafb90c7e20f7de05daf43dfe362f9fc027e3130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143734

Malicious code in nabuf-otomabin-nojaggu npm...

Malicious code in pu-trud-mutiara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe2200a05c83d21d3ec4533684ff68b1dbf760542aebdb3021e5a9ea75b1f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3811ea649b7a5929f7d28bbdb637b4f800cc8ccf73f759ddcfe2852955d1c588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magu-naika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2296d0d429edb82e356edb6ead8411979795b002049cc2df0357029f63b81555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otau-uasuagffdfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335086b4158849f8b2c3bb983978362c3e70fd6838d094b4c6c90548f1fda471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bdee9a3265e5e25f6daeb8dfc83831b8f193881a5d1185fe165d3c87b0e8085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-g0aig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e14622f17b58058a0be2513f3537d53a07a3d79536bf13ec52d0859dad9ffb56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokiragne-asafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38c7d55bd357a512ba67cb18a068ffa8d9d017688e67170513bd9051ef7e318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-lukzi-iluzou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887342f458259c62a98b841ce0f63136b456a19cc7f01e4aabd0522770eef284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otatu-umodotari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a58320ef66500ebde3e421a177604bbce650eb35cac84dcb77c85e96488a335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ntda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fbc06ed58c7cb2cb0907c6c6803b3423b9ecec3a52b64a09fd2124728b9637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017b012fbaf36cd45ea922de3f6311ede5a314bf0d077fd6014d8079639148dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afiat-usutauafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485afbdb8cafd83e03cc23fc06a67b5774f225724d5862854b6f45af8da292ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67b228c4a820103082343947cbc43604024e9cd9d40bad8f23537704a06441c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da405952c9d03bde83853cae73388fc0b4a1cf35b50edba5d2616c2fa6344d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tactiv-busuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd76538dde87466c0ff49d618319ceab686f67512d900b08c41cd87f3e717d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-gonisfga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25f05b62ac868c6449efb18d6f53c4743504bc318fdacfdb0e2023ac6b51ff19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayica-amalaunioama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175dff4d5b66b85e5a703797bd27f6f15ac67a53d59b31774ae23fd217c8d87b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...