EUVD-2025-139292

Malicious code in nurrr-zidan-tea npm...

Malicious code in poglymer-ognboagah-agsaghoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dcc4858c7f45d041ced19a6aa61662875cc4c9d9bd0258bc56532f25d7bd162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7124c5c263a42f3f7c4913236346fd04d792751ff84cf4598030dd820b0e9d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibadsdadh-natufa-munfsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ffa48b5236d1d4328f6501d8705f9061ecf33db8006e09b1ba292fb1fd9d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-bafaaggsig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9050ed1093c1d1bf32151ded226884378a67a8ce7c8412c05ebe58e28b884b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thudsdmbi-vsds-unu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f050d710d0c30683027e9c324ef5062a155cdb67210f1a6647eeb0d3678eb0c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-daraanusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f932f2405a7104b9f4aabede598d760fce5756008d2fc7623a5ca2a03d27bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37167cf41107d871f8bdb660ad7d337b0e45dd06658c46714c8ee3fdc12aead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idasifgfa-ratavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859398b56d811845813a246e0db3b5f8c5d261e4fe3e7b941edd39bec974ca4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erftads-eredd-trufd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3693b1433880712b3f4871fc98240590fe418288703e30316ffb3ef56e68a650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-somdf-fidaabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed2da72f8b31330d00d9b881fb3c062098f016cb019bffff45bb8d2c56d13e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-hali-misaln (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1120acfdbe240a49704c6ddc060a43b722ba643786242bc7906d6ac4357326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b151e3fc0dd80288b8de473e5a0599a030deaad63388a92b7ffb9895f07db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdai-odgafagagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62fd95fe6313af7a815bc9245ed21e5471167ef2f315fa8c1a531bce1736fff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafadi-vnds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e34b3c7e5330064fbb8e85f4f6747de492050f0381eb327ac545d8da9f0571c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gaffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768e9e63d49cf73b0be7740fbf6338c1f9252d06244c42d6cc1dab3c60e68cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amar-afadaffn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ce0258846413ea5b5801f929b7f5d5edd273a5b37ac5107528e97acc1ed1cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hauli-muddisfl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919e7b10aab33a83d7c75ff1d99182b7d491772f509d61cf74ea00350f0f2f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aavof-aafdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 493995f58ac19cd2ef433204ed6156db33583b3cd9d345edf1e33c51f924d45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-halaodi-mil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d0bdc3e7243acaa060ee6f0d4803eb26c90b786f72a2fc7322de2c07bb2cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...