EUVD-2025-137790

Malicious code in astam-ifut-dabuka npm...

Malicious code in modiov-kifni-ufuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf1bd8d37121ff0f0380675e8fce502df260236f237345d5f2a17852f99a8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137061

Malicious code in imodiov-kugfi-comoldai npm...

EUVD-2025-137800

Malicious code in gocay-guga-viguvfuagudivai npm...

EUVD-2025-136314

Malicious code in itale-adci-ggryuyegfjbsgbajtrnnetefbu npm...

EUVD-2025-136387

Malicious code in itale-adci-ggmatondanggangtengdytdbjgdbyru npm...

EUVD-2025-137714

Malicious code in avangi-ogoa-inubami npm...

Malicious code in modiov-kihan-afmc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d0d218448601c52bf26510411314fabbb76906341d8a3544e456eaa1f14fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-hakumaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961a5e265cb5600c433747c48e907dd34c0bf3383f4b2afc18b5ca98a8d20c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138113

Malicious code in avarag-obios-bima npm...

EUVD-2025-138142

Malicious code in avangs-olium-niluvabint npm...

Malicious code in odasv-knu-bonijavufcacvf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 228de940dc4064ee4dcdea3ed4d3aeace7e3d6fe1ef1553c7fc440c465e7bbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fugga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96186fd0da3141951024c35b8809560efd45fd9ec4d7d97e083b53f0dd4fc59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoerocneamuaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243831f9464c3e4928d32905face4f80ac54e1f07730a2ee50cca1f8a7531f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivoyiacaguab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca7b20413a87c452d0840d5ef23d658aeeeaa17e4bbcf23effa58dc870572dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-kuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35784702cbe24cb0362d360a9bb26e75bf96e72be1d019edf5a0e063e79817d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafugyfaagab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f0b74b3658290e8cd2b13730b3c37be92f643555031b1ecdbc855733d9a5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafizang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f282b4d5c03358299afc312c223eec75fc60696b16a99abde3dd150451b5c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atm-kuji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20bebc6df97862103ab148dd5efc29e272345fc0e3680947265484704dfc1a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imalok-ofe-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e3d7f3037441530ff54d40eaf0e010501458dff8b615f758e9aef8a72b6d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...