EUVD-2025-141813

Malicious code in goodain-sangunu-nutagaiga npm...

Malicious code in haritono-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770be846896acb554bf1ae374aae36b8a8e221c2d3380445f515ea6e1b36b9ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174316 Malicious code in goodaan-nusafa-nfigasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7ea5af768ec487dee01cd9b642a79c75402088ff9d4b853f3274e0e1540e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178511 Malicious code in sahuar-satidaf-fagubaiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d45f1fb8136df3dc7a8647476a516bbf215f712c40d16602682623bd592847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175817 Malicious code in kupaio-ulokia-jakai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e034fec80ccf12c1a68623522d16568dd84357b32040bd068ca8dceb79b4079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-agafafaagmmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4bf8cb61ffea72da49d216cccabb7364250aaf83aa9c235c26a35d6560d2902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-aigi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d806c68540240389ffcf3c27fe194d7c22303abb082c96d6302a3616bbadf00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176525 Malicious code in nokire-tanjiro37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc04683a2eb990fad46758ea741b9a4abf4e31fb86ef44cb6e630591dc1e75bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176239 Malicious code in munufafai-sui-cagafs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d65323b3cb7209f68abd6d988f66227f5f5ab985186e04bb01f56a4e1b9815d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-buyau-mgis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80399cb65d640c562abcf8827f52859dca3711a08c22417f4890e440cd8eec7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172638 Malicious code in @mipta1/rea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32241fac5a34079be1541524323260ea2357254ef22fc2cd2c8d8816e81c7830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-maayav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80acf1e13e844c684b5f1547c4d015ca5a996289988791cbf41c059c7dbfd672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177701 Malicious code in polymer-afia-ggaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd369372e1cae8f9a9320de38e5ff4435c434bee1bc06b51a2e86b8d558ccbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8affe1286dcd33992c5dfdaefd96ec6928fefa2d3d0712cb65fe38027f18f0f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avm-ravafavuc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c701970693286ca6cace0ea509ba93d269987c9ab09ff6d95caabac6385278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kais-ajiobnolaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9433198100c1be04aaf3272ed26a7531ebb9a76e723cfaf5e07d55ce5e56c8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174947 Malicious code in ira-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e890e166e82e67375392e48f70386ee81068a07197433d64251a055e221233e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175748 Malicious code in kupaio-kulaa-jokiohakakimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410d021ecc167ec3eb7bcb5d907008adb9e4ed5c8fe1dd3b32155e326efad3ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173725 Malicious code in butauahur-sofauiui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc423753e6051cbae622c66259444fb6e66e348cf529cbc5ce185df3646b2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174847 Malicious code in hunimi-satib-nbib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674e2a206b0136a27d892198584cbf4c1e95997b49bb05c57428bb0cc1697bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...