EUVD-2025-136698

Malicious code in inda-fodija-gif npm...

Malicious code in liobc-ug-afayafuycig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0a6acdacd00e92ac314d37f5f4767ad48afbc0d5b961565bdb68c7cf4c5ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137886

Malicious code in flights-lutuiog-aloinal npm...

Malicious code in odasv-kuu-bofaufsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763fb2c7bf112c16f7b2c8c23e58c991283f08b0f9c7ee83565624b669c80943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodio-agajoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e3cdc4e0e1bec6193c4781c4e09cf83035a2adbdfe966fc9780752663884ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugiafaidabaiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838b6d0db12800e01fa627ecab46df65ba0a8bb87014a3a89e9d74e9f053f17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbusasoaufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7155e0f156014ec0119237805d97fab5d58a1d223776a94e4950c070bd3528fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138102

Malicious code in avarag-obis-bidabiala npm...

Malicious code in itale-dci-ssetgs5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4cf6b97d6908918c21fff8904793446f2d63c2c7f133b3d566dc8164d9bac24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kuja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071aa6a7a2bddea05598f0b7d82a3e1a566590405c9df887a4b6b96608e4b441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obis-bidabiala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0340cc31f16f104495847841a7843b4602b250c4b803e603b8ce0845edf4078d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olim-ani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e8ae5328d9c09b54afe92a4ed49508130d539863afd93bba56b926d596b012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138126

Malicious code in avangs-olium-noti npm...

EUVD-2025-137021

Malicious code in imodiov-omfi-cafacevavisa npm...

EUVD-2025-137285

Malicious code in imodiov-koifi-cuidcavuaompmnodag npm...

EUVD-2025-137745

Malicious code in astam-ifut-dinuhsuougoa npm...

EUVD-2025-137765

Malicious code in astam-ifut-dakia npm...

EUVD-2025-136458

Malicious code in itale-adci-aknkonbyunaymhentbagdati npm...

Malicious code in mitok-don-olialoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff941ffdfebc1ba4c7b6d5fc33796fdc3ecd1a956ded89dc61a94b1fec394e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baiucaufaibafuiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f7d88231dd9abba69a97148009280d1cb468d9beb93f2580204aeb6d762e48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...