EUVD-2025-139395

Malicious code in nuilva-vmiam-rafoasiabsua npm...

Malicious code in kupaio-uloka-jakali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604982791f9ec760a710025858db916eca537f1734c956442f5ebeda7d0c87f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178466 Malicious code in sahu-satug-iguagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cd068d02d97583b7a0d566ac6ec32ca429ed2afb576ed5701faf155e3a0604 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176768 Malicious code in nuilva-daerde-oagfafalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16473925091256af5c05ec9e2288cb0f885b49a61edce54016972efa0929a678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176889 Malicious code in nuragi-sutau-gaviog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e419f29ccb5ad462063646daf78645b00e07e8714909f5f18789a712e337ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172785 Malicious code in alvino-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9495c065dfbd725ca658d2e3d0fef2eb381d1dfed6f87a195ffda992a7439f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175095 Malicious code in kapio-samunu-mumadadabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fda4dceced5f391a50730feb564f2ad63a7f2342f6b932e4663b2b38e0de23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176413 Malicious code in nokire-nakao22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11915dadb7fd2ea8b3cf2db29c7ee2030f8103547522b56c5dcddb5a0a8ee305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177769 Malicious code in polymer-agiiha-aftfsafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a282744c45df1515deb22f640a715b83f814528b8da6bc3ba0aadca3b39492c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176278 Malicious code in namada-kang0-tin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed8ae2a13d0dea670f11a0d534c2584eab59459a3cb335957df30fc961f4a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174457 Malicious code in goodain-nusaia-nufti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee86108aeedf1f8238b5e28b0c66e6f5eceb571ba29f0dd1b8e2baed3208122c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176290 Malicious code in nitaaus-13-reff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e41983afe1172044eb2ff38e17c1091a9fe96a5b772f1ed5ecaaa68360a9f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174400 Malicious code in goodafiun-ta-fuagif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea949d3dcf49d7b90039d757f2a61ef19763d66e42c87c7473517d84028e4b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175429 Malicious code in kapvino-sovni-fafgsjkfskfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2431b93a2987cd3cf6ed51d090bc9323f5ca12103718bd1ec6c16e2e325d6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177917 Malicious code in polymer-datdfadsid-raadafadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947b55e4b5cb71dc61d153dac0be67267117d244ae9a365c89af05ad068ff5fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176750 Malicious code in nuilva-dadre-aha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f76c2f4a6af7ab418c31910508f54aecbc748843fdd7f9a534055d9503f42f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177842 Malicious code in polymer-avoafifa-fagssihagbaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b286227af420be5d15c60cabeb0f820bde10f33a450922fd049ead3c5e77f814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179085 Malicious code in thambi-retf-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2cc2ffe14145611a1222feb641f17e36d9afbf724e287215fce18c643638b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178054 Malicious code in polymer-idasifovagfa-rataavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2282e64cf4d78292de53b3fa057a8891e2a1ff351fcdb940598b20f2eb95d62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173859 Malicious code in diva-bai-imbufabao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f00211b24a5afc735bd1b1c76a838b56b0521e730aadffc52d7111c1f5ee91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...