EUVD-2025-136178

Malicious code in itale-adci-yafyudbruwegfheryg npm...

Malicious code in flights-lutug-adibal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 761e1cc77ce5ce1834363046303b894b962fb9a1ecfd7427dd3c8ef13fbfc41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fus-ugaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e0774f84f0aa9e800f645e71228509805731df7f7b343e7a4b72fa8f7de89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dudafigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286d228974d7a44e709bdc285b6d30160be951c7a32cfa8af83ad42f3386d7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgre (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b562b6eddf8d46edeb28c4c1ac013ecf105428d0f56e38d35e7c8088b8b7fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138324

Malicious code in avangi-olia-tabaluoa npm...

Malicious code in inda-foi-gisagabglan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26308d8cadb7c2ec9211c1ba8c4ecc1cf0e39d16871d360cf953f18798cd51c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138064

Malicious code in flights-ilutg-iduhsa npm...

Malicious code in lomi-fuis-fans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7715940793b2643d25228b1a964dad995ba3eb7b6ec44ca2896e06b0e4acf427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183842 Malicious code in masolv-ilo-cvaihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f48df2be2770abc2c0d65f2b250ca333e81da77b4016490ef8b1f84047acb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183623 Malicious code in mahnu-nofity-gamoani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8250f553de7799bda71ab5b2215d8bfa31b3c694227378db661724653bb65e33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182954 Malicious code in itale-adci-ykhjyafizgnol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8f0d02004ff1cb6a7e9457dedaa698ac66154b63cc9f6ff99bf535a4371d48d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184390 Malicious code in modiov-kihoan-afmcaunxabtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572d8fea313cb2ba4b64fb6dffa6c7a89a55a5ea34af253b602402a406039a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181711 Malicious code in astam-ifut-dakaknuiloba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23b383cb6a1cedf50cefc3159545a71db09b721680fce8003c59babdb990ecb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181812 Malicious code in avangs-olims-nol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070457662d9e722929bd437d563898e0d14fcf904fb8850ae35c587e79ec6fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182780 Malicious code in indea-fodioj-agajonafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35fe241d9432e5a1913fa9a6abbb308f5b0c73fdeec93ca8409cd548bfa32e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181608 Malicious code in astam-if-dalimianunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af57249d3abc9e359d65e0a82ccb980be4f7fbb142503d0eaaf52416cd5edaa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184610 Malicious code in odasv-knu-bobacn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ea691e570dc70350a16621b044093daac76730427092574f20cd8d7cbd3366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184682 Malicious code in olobc-uyg-ugiafaiduh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3fe8e058080540d600dbb5535e0ab7c2b07d721d2f50aee626e39e3beee6f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183293 Malicious code in kiudt-acavog-aug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0534ce48fe7b01f65be43213ff5ee873fbb48ba02e7399a409e7d030f8d9f1c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...