EUVD-2025-176485

Malicious code in scripts-private-frontend-fornax npm...

Malicious code in refactor-private-table-finally-water (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7fe350226f8e4b7671ddae6faacdaa25fcb6d3a536a3576ea5fb7a4c42e214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-altair-izar-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa4728fd5bccd6fec6ad0f4459479b41c02571c837732ad3e92688a04eb9bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-pulsar-bionics-cryovolcano (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eabb8807018651b30cbf8b11bdc242a257d7ecaca2b4e19db523d7cd859aa20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analyze-meta-error-chi-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38af8bd8e647f4b19c41cc9074e2ad04540c78db7931d6d32f603a36b415cec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-buffer-exosphere-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bb473d9060c37f760d1ef8d7f47d1d6070940920e1b8e73a875e381abe8fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-mira-puppeteer-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de5d3575e186cbf2ae9d26ac63915739b790bf0fb98bb1ae5db1afc0e3336da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleomagnetism-process-rigel-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806c222b404c6835419bb2dc3e3292a0bfea544dc0e55b7579ef348d91329803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-astrobiology-magellan-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a2c2f4a1059031e0a45ea178d7af7eb11800fc2c6f6b0f385b866faf57316f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-wind-fork-view-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5047c654c3a5d136a00aaba828d7028a4483a1b72fb55a1d2ffff40fcb45f3ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uranology-blueshift-kuiperbelt-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8b622cb4126beefdca25ac457fe921595528d6111b5622e46c5f315f278db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-javascript-kastra-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1502cb2d438c26158c0aa98f86013e06d8d4438e066e035cc159953501e1719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-astrobiology-xo-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209bc773fd8267be72905b2255aec7ca34c777cb43cffc9a378f21758053dd22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in membrane-genomics-passport-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95241f9307b7f8fe74ca59b24e693dfe55cefd7a067a458723a3ae43b1aef6c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-zenobia-antimatter-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b18bb89360c0342d090cbdb5fad1f11ef5a29f77b43b652798932cb81d9a0a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-polaris-pulsar-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55be14a3895b75568b753b0dbb7e610f2c1ea7657cf1dbb55f0d70db002b25a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-rate-limiter-uninstall-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38f83b9375b1dbb5616eb88f859c2dc6f2ddb8d31a21fdcdf96be69a301dd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantumfoam-wavefunction-lacerta-singularity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1788756a6d13118d52bb510dd8455450869ac39134b92adedd8769a84e5d2942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-eigenstate-install-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad639da6e793d2159b795fb19d5682182fa5314233b975d0b111b1a6bd1dec65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oortcloud-css-minimizer-webpack-plugin-config-cryovolcano (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f7585eeec78d135fc3f19ee9979e64089eeaea12fcd8b0be0c70ead619b829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...