EUVD-2025-136222

Malicious code in itale-adci-gnyagyyu npm...

Malicious code in imuay-aig-iyucayafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737f9299ee0d4afa1b181be215d620d69fca643851cd5b19c8cd226811472892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-dbn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54bb4e7cfc0b99051f680de254cec0a32e50e97cbc695bab283b900b258767c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afibanaivuvihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d042ef08869bf0357da7e811da4259d6dfd98fd252cd4a4796b452de7a7d47a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3010ae6fa5ae0e9b92c452f4db374e18b87543516641377fc8adf8029ae3d3b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diwf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34017876a91447b7aa3d078ecabe1c0a60a3aa0e09cfed6dca1e27ed50007b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71ea972e1e4f3a4f1ada421e9c08f37bdf0ef96b780c4e0a0f1a4b70e9e1af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137906

Malicious code in astam-ift-daba npm...

Malicious code in libc-ug-agig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a9782042ebd2bfd167cc710e817c8fedc7ffcff9c2a1f97066bc4242ba787d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136698

Malicious code in inda-fodija-gif npm...

Malicious code in sonic-kg-tifuaffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10049deb09c8a75481b7c35b20b7726e1395b8362ad432c2ab87150114cee58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dabbamikumiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20051494bc401e9c62a1385967639d2dbda39b84d6071bf615f606f586833cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c7a4aec9da523313a3a85468c45778ef9d29f837286ce994ba773be80fdaf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-diakavgy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c69aeebce57ef1db0c7168526e70c925280626bbeda97de6ef52cb8d2fdd746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygdfhbfdydyhgui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7095bedacfb4d4c300592b3abfc4739809dbec65029a9677efc726cf7932ab29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mokok-lukaunai-huaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e72276814163d204433c15ddd04389d0e3af9e1e85d320d728b35bb3fed15c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-notabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a046ad3e973b0fa185f923c3e07437f653a5e697c9d04c94abc59c0d44840b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136882

Malicious code in imugay-avg-daiugadajdufij npm...

Malicious code in oloc-uyg-uhfadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2356d9e56fb37f149f3502ff33c5c161fdbb221002b2d692a770a3dfe1b0dcf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1792c6032918c71e929242a14ab5423797cc668a94ed27075456676145e9835a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...