EUVD-2025-138168

Malicious code in avangs-olios-noly npm...

EUVD-2025-138208

Malicious code in avangs-olioms-nolibamayi npm...

Malicious code in imugay-avg-ijimamfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf58ecbffd0025a078eaad92b8243c4a8a66d8a47297848beca0fc22195711f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-ava0nu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf0d1ee6455358f77f62a89beee65196d91078a3aad2ecb3a73fceed4e957d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdwadsafeafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a54c8919eab94b4c7992d29e06906de16f81f7798f7dfb3f2c0ed286b9b4def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136112

Malicious code in itale-dci-fnghdueyfge npm...

EUVD-2025-137858

Malicious code in flights-tuig-alum npm...

Malicious code in imodiov-kufi-comoldecoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980942773f1738a9f96b560c1c3535b71166986ea0ab14e646e52f99d6af8426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarage-olios-noilag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0e03258cc3ff220b58f7f9ed8db43fbacbf403979fa6cde1e1138d50ffcb63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in one-kiat-ibuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b085caa64a1f0fa524239e31cbdf7967b2b94210754ecb9f4eeee1b3f2c975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136085

Malicious code in itale-dci-jyhfr npm...

Malicious code in flight-ilutag-zilauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebdf34564f97cfe0acff58d2f6cd28abec64e7b3c69142b8e4d2327e4f2f4c41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugofahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c89d89eb303c3d0b69c47c4760df9ac6ba33f27dbdd7ab0bb6a832fceea24f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-favx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a000acaf97bb79d327ceeb3b7915f5276c51977b1335a385c7ea2d54cedcbfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibaibuacaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153906a9b5db63acc3c40de36cc1f2c80574f4be988d7100cb86dbf44049912f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitk-oni-lapis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442cf9b9d9819fd1b22746e0deb7967eaf955d6fce7845db2fd1fc8295204f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuis-kjt-garfuaavimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ccd0860ddb5476a84a051e5bfa786ba1fdf3e35b9aafdc76f4ee8abc5f129b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-uol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67997e1c861252e79bf4a82fe7dcfbbba430c9679aa1b256f248179d281f277f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea8a7803646ef854595ac44ac3c5d3240b816fb8a183457253ab2b515bb4864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf1bd8d37121ff0f0380675e8fce502df260236f237345d5f2a17852f99a8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...