EUVD-2025-136489

Malicious code in sahunim-satudfui-fadafa npm...

Malicious code in augis-pod9r-munio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f72f2e7087ce06336c8cbb693b5cdb750479066a8f49df1a58c7f9e54c8c9d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimmo-fga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4140ad4dc3a20f0c7c46b05f6d6f8a32046db3a79490cfd8fa434691cc364a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172541 Malicious code in verts-otimmo-ffigggafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8ec906f4b5cfe135af83d35a4447f808c8f957982c9226e6fb4019ed5adc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172581 Malicious code in verts-otimo-nafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5146fc91236c12af5e60b3d841ebe7ba0c604b243f712dd7d6969849326f16f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172520 Malicious code in verts-otigo-nahgiaigfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0cdb49c852c6e5f72cf868b9c79673ea15a496783f6c2c40dcfdb4311c1146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172191 Malicious code in augis-lepaod-matiparah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264162510547047e9c4464f0fed342ef71dbbeb81924b6e3b7fe974acf7950a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172185 Malicious code in augis-lepaod-matanidap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728a5426525d5c65662e56a82b6c0fe824bcc59b565247a110c0deca8f853291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-145912

Malicious code in aoifeoconnor npm...

EUVD-2025-145233

Malicious code in michaelturner npm...

EUVD-2025-146161

Malicious code in aburahman npm...

MAL-2025-171713 Malicious code in pagi-chief (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068da2729955f81196162b27348a9e97c134cee022f20dfbb04534d433db3db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in badrchocolat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0660a9257b4a9ea40a67d3cb5c5f37d56ba38a9b11e19230522625a3c4190d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maevekelly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376373d830b5b9c73f83e3fc78016edcc3c8c40456c4c8426452dc89a5af5a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saoirsedonnelly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fa22d1c89dd2641d39dc495da4393354374c3ebcd9efaa4979a3fe8a578c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171701 Malicious code in orlaflynn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d6955a5b48728f4e3575138ffe3da03fb1a0d875a2825b6eab6b14deac0356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171277 Malicious code in graceward (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c670bd7a862cfb51104615367cc1bd1eb1880fe3eaadc996e7f65dfc91fd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171495 Malicious code in lexiokan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef385ec441086a5d8128a2f5dfff48b1fb4945490c275e244d2f00453ad4a98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171716 Malicious code in paulocosta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc89ffabc253abce5b383433fd6d61a366f90477a4796100b6cbff2e2c57d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171054 Malicious code in cometobserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570b79c8e800013aa7b525f860206de1b4134ffbbf91e03ca2f85669f14f9915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...