EUVD-2025-137886

Malicious code in flights-lutuiog-aloinal npm...

Malicious code in odasv-kiuu-bio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7f352cbfa6b238479696887407ef04f03d8cc88f4e355c2b7b925d6e62626b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137948

Malicious code in astam-ifst-daiusikiula npm...

Malicious code in hitale-irhar-aaeasdeadeasdeadeddaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277223d85a2ec947c05ddf64382978030231ab7fd53a302f8e9fcb630c3b5e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-alai-ava0buku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d1ee1e4fcfb6d861a6ee2420abc019a04b93c35f17a482c32baf5c18e011a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-civufagvuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8306b853f88bfdc9dd224c794f0f2fd828b7bcf317566e8c4b1d49da693f531f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutug-adibal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 761e1cc77ce5ce1834363046303b894b962fb9a1ecfd7427dd3c8ef13fbfc41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafufiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77068e34e94237a64b817e5c84cbff2d167e2e865d515f7d41fcf615cc3d0a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafuifiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2754226febfbe72f3b3f8d03a73ce426b070c7a4035ee8ba8d1b7aaaf7028202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136830

Malicious code in imugay-avig-ijimamfaatugf npm...

Malicious code in modiov-kifni-ufbaceua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c623c91476187a9738894762a28c366fd9f73827daf55b4a88d4d38a6aa30a62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-aig-iyucauagyafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89377f9e4110b9f46dea808a5fdf0a1cff8082ac6fa627ad5a7645b28c23c3a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136618

Malicious code in inda-fodja-guofgogiapa npm...

EUVD-2025-136752

Malicious code in imugiay-avg-daigajuj npm...

Malicious code in kisut-diufg-doa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b337272a9e1a0a478ee7398da30d02a3ecfda9c3f50254de940ce6164b7744fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fyejsyegf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d5edacac1b2d3c284afa3133e7650c55d579e3a2cbe8f1157da0833805b470a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136553

Malicious code in inda-foji-gis npm...

Malicious code in kisut-difg-diwfzcf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6824ad694f632a53fe9bd8ddcc46304432857abba528b704919ec53e87b6e561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifuksit-daiusikiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a3a710a7f8a093a4a85e33379e72824d9bcacd9154adcaf4da3aa28bbc1b159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpantekkkktololghyjhbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9ea801b231d899b1d15aaff6ab8719d73f0b1e77def96417a2fda6257e8d456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...