EUVD-2025-148529

Malicious code in tealove-darknest27 npm...

Malicious code in ramadan-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe9d3852875eb4062784b3a22f795cc6718e306c63de24540b951d3eb99d064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7582f6473470fc89b6a8e1336bbb742634bd1d8e28b1bc1bdcc245e7edc158b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulpo-kai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998e5917bbc84c630710848c8cd66519d29fc2104f523c41bb35a501fc27375f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojausggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7587c529ad59d87468cf93154afc828dffdd97cdf2d8d54cc158eb3e2348bdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df484e90ee86d0283a12b714e53f3f480c2c31ab8cdd349ad9ac562b8420987f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapafovgfiagno-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffac5e79478d06454b6133c512c20920bcfe74b467e36cca7e818aa78370c391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokiraifine-asa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920ceb9e1af3212f1e43692cc10e81f23d8020df58c2321389aa0422bfd20c96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d18892b3a203bcf7ad7bcc3c0a3f2b0ed0d13b90bad6abe117568f3be4a1d45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d622aa7188d73f8473817d297325ed2392eea82ea806bbb241d07b2f49159d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f9b2f2abeadcba20b4f7bfce5779f782a3c93020b2c7614da60db68ce763e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musnisdr-nauyt-must (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9afa706b18c22ea26ee62cc439d10126e1bb49b63deab615453cdcb43a6896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c1655ae399cee174b089a6a4743088bbbe9d9164c37fad06495dca636a4594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164328 Malicious code in pitra-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3dda8ea565fce5796a421a5177d325432cc8cf6d32727b882a3b8aa9c3f9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150546 Malicious code in @miptaa02/axdzxody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95dab39df7152e5920e93c6e4035181ea7d4c827964f8a512738e8d0a9537643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166735 Malicious code in teaa-reborn38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2758aba44f676a165a9fc041a44db6156fe7866f16c137555a9cf2a22ca7a75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157844 Malicious code in kuinsu-uyilu-viakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2294a9afeca2aee281441f0d248980939bb93ed13b96b53c3cb8ad99f9087947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151493 Malicious code in abiuna-mobhani-aymaomsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ae03f3585a202dac86a450c10db44edecfcb1b8736bb5cffdde2bec429c001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167948 Malicious code in teagood-yakuna85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 010cedbcc1c13e426f443b4b835c952b803be4477c59ec3530603b73ce31957d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165536 Malicious code in sabulai-nali-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342dcacce0a1fd7afca33639b6a843dad25632874220b6f018f39f862e9c61de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...