EUVD-2025-120122

Malicious code in yildun-config-electron-ophiuchus npm...

Malicious code in citra-tomat40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566f53dd49ef03373a5cd1086153dd894bc2d0f4ef01a0cb16d8ff4030781690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e518f998ce1d11acb733ff81cfbda4b324b8d333570055d68b8bfc35cddfb6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132120 Malicious code in arif-saguer54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26b3eea24dd26793681dd4955cf76b2976b6f3cb9bb8b22aa158ceee83d3b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-tahu60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efb4b9fe2e79ded20c49a345426d5e5ea7a91d40d88b9977e10c8ac68335a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-kentang95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70e1fd5a3bf97d8f6e5f9430455a25a2a7bd2d1153d6c8f2af823d2775a9626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-saguer16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416eed654a1aef465c1b5d11d8a29594a499e477c1654a75e22441b4888f6f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-rangginang97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1dcd7d0a5ae2153f23308f4ccbbc355f687799871d07e065d58c503d492f21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125674 Malicious code in decent_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501454f95fd14e1a88c264b1b68ac0fc16ba6b45b01d874ae6c9c65fe79bf382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124801 Malicious code in ade-kentang1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c06be5cce1ba3b74f04c4ecf0d6715c55b03e2cd835841f8955fc62b38b0b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in double_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d8c94f949101e56992a7030ecdd05b61442b541a083314af3d98971e691d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-mieayam47-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48be35fdecf616cb4e7773492b9d3183e5667e1f73eb4be5e5d25850a16be841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119329 Malicious code in crucial_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 167ece42e1e98cdcf3eddc6eeb3d002813ac6467aa1a5075f8de654ad0ef56ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119378 Malicious code in detailed_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6b49271f4681404aae7c21e8329ee8ca38df67224cb1eeca0f9779d2aa2370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123073 Malicious code in rudi-rujaksoto32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3930bf57ea14a9612fc73b44155597003a61427afa4cf2fe1d263cdfd78cb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123697 Malicious code in tuti-empal76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e8c37ed61fe456ce8196cb6b4d3a51fbb1ceec5f7293e3343c5f7730ce0555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acceptable_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5efc56b6e8be72fabf2aa1ebd5e46ffebbfca2d80c91047f7866e87f8e1fac65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110912 Malicious code in widespread_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494a49c0d1eb84127bc15ce035adcca87655f49e761226cac6cbce7c526b7902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_cougar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa3b49b437d181480bb8601c0e8728e1e32dab0e3b38850f20b9fa76eb0ac27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monetary_ocelot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3699caa9d0d942e581c18c380a5a9192d7f908fb674950f9f02636d9fc799c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...