EUVD-2025-149054

Malicious code in teagood-namakai98 npm...

Malicious code in digo-kamoli-ailasokamloiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc090e6894deab2616a6a1f184f882f3600fd853672abd009b876b02363c994c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0a01f2ec450d1b8d7ba7ee5e46a1e2e3115640bba95e0e62aa8c99c3695bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2196e8e14ec3def4e9234ccb43f62ef3450dbbb4c3436bd98fc062a496ae43af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sau-naki-ups (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37de7b4aab5f708d708d9aac7f78683f5b029e31302c090cce78bedb1bf196bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abia-avungi-agni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a9c99096c1bae65c508bcc7496bc8d168abf70c3727d64b608fbe67c993694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugaat-doauufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7490ea91715cba6ec1df08f067929bd0c694d4f488f9e74ad485eb7d50e8cb0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d634d2375d102d96b8a989e2f3ae451cf0be3eba9ef1738b1a4d096abf2e9d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c055f95f4e04c9fb39959a32aa67460103105b0846573ef908e3ad072a2cfc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-a1rea-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cf06cbe475c11c888a506518adc7084161d388cda209592d7ecaebeeca407a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayai-auioanyaugial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce96d99719f1401b082ee88820491cbc20acf39dd06497ac5b5e0b80e2eea42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2ff21e573846b4e5ec94a6ee0d84bc32afef3268419eb7bd652b77ec4be523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minda-buipenajaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b45da3088d21865ef96e35f87e6473d677d3dab980b07aa4d3d8b5d21d8525df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca1508b2123c5cd492cdd46c10ce8a18a40b6b69a0f514b70e968c6024c661e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87884553c12cff353be878899d93e9d82a22ceb1c8f0090c9519644a36df89f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afgfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfd1ed2553ff2b267f0dea3e72ef23cb749a6dc3ac165ecdcc54fb2449ab000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168780 Malicious code in tealoveness51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ac1b8acc7446775280b6c337a4b1ba0bf75bc254f6d926ece5da9b5a325375c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169593 Malicious code in uarg-masituhai-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9dbe533206028880efc33fa2ca677761cb44c702a2623dfa5e8cfd8ad4449c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169775 Malicious code in uinsnu-lotipmi-kilr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5e97da9c7df24511bba803af050c292339c6206634198a49df2f9a0a88c28e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166073 Malicious code in slamet-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9082ed568669bd4864176672c6ff543116d3d27bcca8b977dcb1df28cbef36f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...