EUVD-2025-143318

Malicious code in anidata-hud-mav npm...

Malicious code in sahunim-satudi-fadabidantu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4cc1ee447cb7b30bf1f6b53d31bcf71a4a832c18411005f546924d5c71d0ab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satg-iufaaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece8372b0381b6bd7fef0f9ef492e97641056884ad92639a12b74933a6837a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimana-satiub-naiboib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed914dd74ae15e0abdead71a81a5b85b987875a307900621501dea8bade077e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauahur-sofi-dosaih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7126e5d7daf07b007ccd0b6e033bfd6aa972a65c769a1fe8ef8d8e9e6aae4c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutila-jokilouana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501dd078fa9257663b83652bc8c2c44dfc688ceab89623c70492d09379e286da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaghuagaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b3912ba0f3f0f03c2a758f9a65d111f99558a75cb7214ecdb66a1dc492be1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178311 Malicious code in riya-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608e40c8e786100973cee06caa213f036afec4a001f62e8ba66260cce4acee4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174197 Malicious code in godi-tufuja-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bd0c5433bce51b3cf0513a208555bb2997e44a567f2182be132bbb9550d8da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179210 Malicious code in tray-iutup-ubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8363455a61ab1e09dd7d5a86bd4f60bd24802a66af6443d7a41120a5f74288f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179352 Malicious code in unimna-satiagobifagof-naiogis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50ac5748d1673751e31f9ce7c17bc8153877a816cded6555ee67a2a95f44485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175497 Malicious code in kiki-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f95ca22d6a62c3e502a2cd56d95b164f63854243e324c1f6762e7d60c070031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178086 Malicious code in polymer-rtte-tesas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19558df7205511ca7745cb60dc612a66b787142fc114a83dfda55992e438e8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178480 Malicious code in sahu-sautg-infaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758f641d7ee4fa83adc866a511271b4db4f2055976aad53cefaa83396be4dcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172785 Malicious code in alvino-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9495c065dfbd725ca658d2e3d0fef2eb381d1dfed6f87a195ffda992a7439f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176689 Malicious code in nuilva-bavam-madianv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e354d7a00f9a1a20b781a9789554aeb316a9d87a72d2baba03a39a77a6375703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179085 Malicious code in thambi-retf-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2cc2ffe14145611a1222feb641f17e36d9afbf724e287215fce18c643638b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176157 Malicious code in miusafasdan-fafafuds-afnaearaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3079ded3a00494ecdbae1813b35c393f0e1e0cf323b8bda21b420640968e40cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177842 Malicious code in polymer-avoafifa-fagssihagbaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b286227af420be5d15c60cabeb0f820bde10f33a450922fd049ead3c5e77f814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178466 Malicious code in sahu-satug-iguagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cd068d02d97583b7a0d566ac6ec32ca429ed2afb576ed5701faf155e3a0604 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...