EUVD-2025-135982

Malicious code in itale-dci-ssfres npm...

EUVD-2025-136571

Malicious code in inda-foji-giaasfia npm...

EUVD-2025-137669

Malicious code in gociay-uinga-uugaucfu npm...

Malicious code in item-at-oa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b452075ca14f041c20de777d02f1b0be18adfc7dfd9ca58c9486e9d02fb0ad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-aaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf74211cd544e2a039a5c5ed42be2ad10226c5357d47d6e8093347d686e1624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgre (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b562b6eddf8d46edeb28c4c1ac013ecf105428d0f56e38d35e7c8088b8b7fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-ayig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf400e7f29233f69e8a35b7e08ea9b8cff001eece48a1728ecba7f8d5b311dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-boniv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc2e6537efcb372df433c82b15487e0f848ba008378fdf03383a21fd0af32bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136178

Malicious code in itale-adci-yafyudbruwegfheryg npm...

Malicious code in kisut-diufg-doa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b337272a9e1a0a478ee7398da30d02a3ecfda9c3f50254de940ce6164b7744fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136896

Malicious code in imuay-avig-iayafucaamrfuf npm...

Malicious code in kisut-difg-diwfzcf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6824ad694f632a53fe9bd8ddcc46304432857abba528b704919ec53e87b6e561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dudafigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286d228974d7a44e709bdc285b6d30160be951c7a32cfa8af83ad42f3386d7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fus-ugaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e0774f84f0aa9e800f645e71228509805731df7f7b343e7a4b72fa8f7de89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b176efc9e7e4e5b8a98de769bc40399b2ea2dad869c2b5405f228e648103c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tifuacfiffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e4d12ee18c3ed9742867a6dd78c835088f557ec78932c011bfd89ada8507ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gisagabglan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26308d8cadb7c2ec9211c1ba8c4ecc1cf0e39d16871d360cf953f18798cd51c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138236

Malicious code in avangs-olims-nol npm...

Malicious code in astam-ifut-daknaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f114a0e13dc53b26a0866ae5456eb75c877103a70e2b7ddda4d75991ad0516cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-givas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d941d5a9444f3db2109822709e885508bc0ab5ec8c2d636749a4fa314cb3371d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...