EUVD-2025-136489

Malicious code in sahunim-satudfui-fadafa npm...

Malicious code in miands-mas-nuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b55cd059a258dc9838d8ca6ed050c187e6618067596fd5a57a03c4de1d09d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136572

Malicious code in sahufarf-satidaf-favufati npm...

Malicious code in nuilva-avim-rav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f33a3f5020528958e8bdc785635753e98c2652d013064ddc442e10c0534565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-afofafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa77974690ce84b18547b1e266d307bd382a3932f36569d53bde2d77f2aa493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-munvda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38f10557933c09c94195b2470a7b0be5142383d678aa2aa087e522fbc7410c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manuat-ma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31eded59ea6b6bd82960c1d29d663ccdd320e60d4379361bca391cd7cb0b3d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaf-danabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234230d6ca9a72313a64dcddd488a4d1a3f7e5208f8cc76e4013bd81e0d69a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutup-nusdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951e22bb423fec98be2560c57e2d0e969db550395c76df4a961e8babcbf54538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmiam-ravfonasiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccc7d763692868fb4c851c16f787500525ceeefa4fce8ee86b0f243d1a7e8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-minst-nuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2c593e537f69f0e826613574b64f37f3ff5b6577bb408c6b9dd8fc6087c124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457147ba75763bb8fe1b9025470155f1ac3bbace24bbbac57b0e0cd662b1aa90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in go-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a259407d5bee0272c1c54dec3bdf3bd9d93efd1c99ac059e22badca298543a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gigsggb-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dbd0e8b3b051874e6e257e11f3b95a5c979773cbee43e9b849cb912ad293360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufai-suffi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57620ac9350095f2d4011cced5a9c577ea8809131d3c2f81a689ad7b7452acb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-saufdaggafoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1abaed1996ffbed75eeb2b51183b2471e2d67d0828b709041c92507d273582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satsgamf-anuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4eb5e4f536f158747fac22295ecf541380fa465f5422872fe7e94ff57089b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gas-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4282f66e3d7c86b429854fcee401c31f4351c074e524055c4de9593632995bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutila-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81fd739cb8751964bc9bf647d048e4481c52ea3ebbdc76a9955c1b4a20261e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jokiohakaikimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06dc097aff1e3041c00433fcc41e359b8aa6641e9532d43f01083d33a9740f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...