EUVD-2025-138332

Malicious code in avangi-olia-itniabu npm...

Malicious code in manu-oib-giso1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e940c41767ec424f4b222f4a04d5c377d616f0cc66c0b9234d11e0ef55213b1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubuskuaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b422a40e06f0b263bcc4348df3c6a6ed30ec3d8331a38ce649a52ae134755b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137459

Malicious code in hitale-irher-aeswadwadsafeafaadde npm...

Malicious code in kisut-diufg-danoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fef1fd504755cc54dd947e0e692c717fcf43158cf3a9d18b2f34ea49d784c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185263 Malicious code in tunis-kit-bogavotaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66868234ffc22c54dd48fd0efb37230334117a47d667d8825115ddfe72f840d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182844 Malicious code in itale-adci-ggmatondnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b009ff745b4cbefa8b6b3540e35f7a17ea32a0163efccfd3c6757c608995d49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181910 Malicious code in avarag-olubis-bali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1355a6c47d32088c071c6942f71ab03dd7ad91fcaef58f557105d450a482e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182473 Malicious code in imodiov-kufni-ufavcseqinsdaodatayctaban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2428b2fb97ee8dca26fb9b5ad410538d22ff636e015129a2e20789ddc27118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183364 Malicious code in lobac-ub-afdmafdacau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15a5fa9119530d5be87cd140649cfcced8e4d954232c2b9d362ea8b676ce025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182803 Malicious code in itale-adci-akonlki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ddfd0424592c551ddab661021906d0c6ef233f8da1fe03e4c607f6909f7558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183309 Malicious code in libc-ubg-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2220998ace09a52355c3bfe6a1070cbc6c6d580c59ac7b198767e37075aee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182699 Malicious code in inda-fodja-gifaoobiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 321327453a43ff5c726dde514466decd65966b3e140bc6b74bc2737afe92af80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183775 Malicious code in manu-oyib-gisnuosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223fbdd9ec2e6b80c9ee527cf19bcb1673ac6a4b21c0080d1dd43a9d55f65f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184669 Malicious code in oliobc-uyg-ugah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9757467f755bd78974e6c2735243dbf38866d583d412f0d31bab4553004c8c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185326 Malicious code in unise-kiat-boaipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ce60b62c31e5c4a0e2038330a8342509e2fdec21071e7d2e70bdb7a3805173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182584 Malicious code in imugay-avg-ijimaumfagaaugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c70e33bb7e9a5383b3efee7b5bba811f3108f32f2b18d3fca8270cf71ed11427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183667 Malicious code in manu-oi-gi1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd4b16abb1671cd2cfffa342fd1cf294e4b8348fef019910cb321adddc52aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182463 Malicious code in imodiov-kufni-uavcseqdayaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e32d60dc7e3ce9c6e2162695681c221e5995f73660632cea63d151bb73533b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184172 Malicious code in modaiv-kvu-ibaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3f054dae765feaa6f0ea249731d57ff39acb6adee76dca2df99d0d4df51dca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...