EUVD-2025-137685

Malicious code in gociay-uinaga-ugugfagaufu npm...

Malicious code in avangi-olia-tabauoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da82ab7638307c237a296bd285d5dc6ea84929898fea5ffbd014cd1031ef91e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodija-gifaoobaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9075b2157456d3bcfc43636c8b4a2ecf4e324d0cc9f807dd0479ef16069541c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-aknkonyunaymhedti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d38c13338fded806acd0d9e38e13050405a242271c145977cc3b8798539fa412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olim-abrni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b370b3afde5d205573c4609fd355f2cb1bb6393224ea474ae547095d29512a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-viguagudivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb16d534f4d6dbc3349acb06fa3234b6a1ba4f434390a50e0e3c32319977c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138048

Malicious code in flights-inlutag-idosaho npm...

Malicious code in tunis-kjt-gs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bf5b7563ab82addff5af4023d0a91c85d7299d9e97855ec813b188df615c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loibac-ubg-tuagaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670d14b2f4ef3bfbef032fd90ad00a1c5299a6c299f06ed05b4978bec32014b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-daika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3a08457090344e07fbede7d87df122e366571025387f66c1e07173dd3b80d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kiat-boida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b370dc549125c54caf3cbd9321f796dc83c73433f78c8d8e6f57124f0c4a896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-diftav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db906887561a58677069b777d14972864aad073bb1f45d7903713bac6217c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137214

Malicious code in imodiov-kufi-cuwaimoi npm...

EUVD-2025-137689

Malicious code in gociay-uinaga-ugugfagafu npm...

Malicious code in flight-iloamatnag-ziumaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2df12a789088bfd9e43e004f6bc9206cb3c5bf74205582fd4aa8e4d5fd3399e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afibanaivuvaavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93bad98509cccbd56c74ee9e56115079a562c4589f9d76fe7295002fc7d0ab89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goiy-ng-gufaguagaufafci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277fc91248abf7140783ed592db6f1a3ec7da526fdb9a5666c68fe26e2ddfba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afibahid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d37a79af175b71d69c39dff82186e17d56e0e2208e3b058b1f7216d56b52bf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137227

Malicious code in imodiov-kufi-comoldecoi npm...

Malicious code in itale-adci-hykaulaygyng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301e1296f5194ecb6abcc7e1d87e9392f06e4690ad3d8b0122bc4f365fd203f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...