EUVD-2025-143318

Malicious code in anidata-hud-mav npm...

Malicious code in sahunim-satudi-fadabidantu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4cc1ee447cb7b30bf1f6b53d31bcf71a4a832c18411005f546924d5c71d0ab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satg-iufaaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece8372b0381b6bd7fef0f9ef492e97641056884ad92639a12b74933a6837a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauahur-sofi-dosaih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7126e5d7daf07b007ccd0b6e033bfd6aa972a65c769a1fe8ef8d8e9e6aae4c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutila-jokilouana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501dd078fa9257663b83652bc8c2c44dfc688ceab89623c70492d09379e286da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaghuagaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b3912ba0f3f0f03c2a758f9a65d111f99558a75cb7214ecdb66a1dc492be1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178311 Malicious code in riya-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608e40c8e786100973cee06caa213f036afec4a001f62e8ba66260cce4acee4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177769 Malicious code in polymer-agiiha-aftfsafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a282744c45df1515deb22f640a715b83f814528b8da6bc3ba0aadca3b39492c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178848 Malicious code in tauhur-sofi-ditouay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c41859505c5ad5d8c436a8be43b308821d6722816e1f4a3306d09fbd59fb27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-toi-muyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f6fbad0904bb5515ab099c3d4d0db3b2f3c6be66d336f064c5339158eb4d5a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samnu-miva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec334fc7a0edf36d27704d209d571d063173c2200870ea941b76c3626905199f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140574

Malicious code in kupaio-kia-jakafafswafofoai npm...

MAL-2025-175095 Malicious code in kapio-samunu-mumadadabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fda4dceced5f391a50730feb564f2ad63a7f2342f6b932e4663b2b38e0de23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174766 Malicious code in hokage-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b15d47ce762e1f19aa3a96ccd8b8fef7983f6d9dbfc597752fd2aea3a5b1ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179028 Malicious code in tersui-marina-nutru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698fdc38ff316f24bd97d5563a8e1dc7e8a4398d89ad3488ed6bea18449dc2e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179179 Malicious code in thumbi-vss-budi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fabf03b69292801a5c5b1fa40eb540b20933d0b673d2dcf8916589e0f2f4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247c46fed48d8d99726ed87a0351468afd7680a2541a8bcbc6d92b28e9f9f727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177443 Malicious code in poglymer-ogminmh-amamoffaoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb09a9f354bb34b7fd3574c08e1d23597b9f975d361936063fae982fd1df1ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176278 Malicious code in namada-kang0-tin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed8ae2a13d0dea670f11a0d534c2584eab59459a3cb335957df30fc961f4a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177528 Malicious code in poglymer-ognboah-agavofagsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4da536623a3c265d8b62cf8cbc89e15a70df8c53595fa45f34e0839061483fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...