EUVD-2025-136521

Malicious code in sahunim-sat-fadabiu npm...

MAL-2025-175661 Malicious code in ksaki-kaisom-olomalao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 712d1385d88ec91f5f5087917d32a126021130dac291f46b688963c77293a9a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176523 Malicious code in nokire-tanjiro355 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4467f157f340ecfd13a7ecf208bf4a136ae5da221a59fb4bbff927e5e2b55c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173586 Malicious code in butanah-fipoha-haufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 346983a0d6a387a81fe0e2106c3943c7b2d9e649823ba7a799dfc39cb92909c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178278 Malicious code in rintono-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d103a8a8262ce3e67e51bf2a834d3fa7f1d6fea598460efdcace1bec01a52ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175494 Malicious code in kiki-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0150b3c7b71c39a855f051ff21ceb1658a425f33122d242c522b53cd977ae39a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177292 Malicious code in poglymer-ogi-gf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528cbc61a84190a4f3ec327b47ade2d6539b28bff07d450e0e605729bf46ff96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176421 Malicious code in nokire-nakao3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2717eb035b89512bf1a1096556e593af08103d260ed3d2578eb6fe42016a739e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173672 Malicious code in butanaih-asfia-dafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34cfbbed0d596eb7423edeed8830c288d06fb6240b2ee5ed79ec7fb7f14d7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175435 Malicious code in kapvino-sovni-fafskfskfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf941c78e3cf87c4d7524724aba5abdb1443735b38ad5e12ac3daa8d1ce25ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176915 Malicious code in nurai-sutaf-dafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27f95a19f496852b0363c98f7bb7e79e3458feba9832f7a56895adbc7c0e353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-gidgodafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c8b9023191ae1469763721d4674eb269b2a0c2cd87a70031337aefdb4994f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178368 Malicious code in saaaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213b20240285c4b1efd8add204be2a9b30867d9732d7604b5dcf50567c0f1325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173156 Malicious code in buis-manis-boad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3272a1271e165d669151c7734096e20cca568583faf3023f0cced2e7b95f2909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175001 Malicious code in irfan-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319c238258bf65ed35aa1d8e9874d70bd3732b9fc98504d81df08da41d88d22a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174158 Malicious code in godi-tuam-inapunaupayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b537f76092db86c5207d4dbacad1b4db38608a002f3ed1236ddb000cb3fac0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175604 Malicious code in ksai-kaisom-olakialio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be3a9f244b3329d3f35d03c3fe27e2fb20802ab72ed39d7e3bd10185a717f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173468 Malicious code in buta-fna-igaghfnaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f44da0a87d844e96f35d1e1b524d73f9b768cbcebe4e843ae84eb2e5ff40ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176310 Malicious code in nokire-kaguya2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 883d7ccd8752846df51a56a840f41206cdae512f4403a52a101845d7878dd807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174114 Malicious code in divata-tutabi-ivnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ede57668845d5baf01fc9c5b19c2843d4dbbd06a6d70002f387d1b00dda58e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...