EUVD-2025-140440

Malicious code in kupaio-ulokia-jakalokakaanaoi npm...

Malicious code in hunimana-satiub-naiboib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed914dd74ae15e0abdead71a81a5b85b987875a307900621501dea8bade077e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ea731cd259b54647417118f0859f7551ec258ec3dd6bb77b83c101f98352e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42aaaf4d009dd3e8dca0e837ddc3de626c4cd4dfe7c295ea1896da9fb413605a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a981a7cd59e8d93a6620357e4e3c8a04f2b64eb0cb590113b653a4ecae91a789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manuis-boaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9baca5bc99b77b896ef5cd9725ee8c4cfb0cb3448455fcf6fbff7ee36022af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-ditofuaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ad88d737dbf068cb007409e666d796cf39a1c04ef555d190505733f8c04377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaghuagaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b3912ba0f3f0f03c2a758f9a65d111f99558a75cb7214ecdb66a1dc492be1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiagaiha-afafafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a86fe4dabdaaa8f16397b80c575294e21c824d648131f4e8bb219469055375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hauli-mul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957d63d9d916beb40c91a3d9c419f1e80cb82ab563a4d520d55f905a6a276225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasdah-manasisgad-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4b233d1bca0ca58847f26e6a5082942e1300cba334eb8935edddd954cddb92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140448

Malicious code in kupaio-ulokia-jakafofoai npm...

Malicious code in anak-jalanan-mdn46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d3667af89882d5cddb35ec8ca2aa4856afc116798e0b436c093dc3bba57dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboah-asi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba700ce33a681c45084ca34a82408d2e67783510d72fd0bc57533e049a9ef1fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-giubaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d468ad6e83267abff6b01f87166fe8b1b64ed0825a2b166f7dda6d79cc5bb828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jakali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604982791f9ec760a710025858db916eca537f1734c956442f5ebeda7d0c87f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satg-iufaaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece8372b0381b6bd7fef0f9ef492e97641056884ad92639a12b74933a6837a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-142545

Malicious code in butry-mutyu-waegressur npm...

Malicious code in kapvino-socovni-fvpavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b30e6a54554ef361fb0b37454728ab259657f1f22887519d45cbbf866bab4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247c46fed48d8d99726ed87a0351468afd7680a2541a8bcbc6d92b28e9f9f727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...