EUVD-2025-143652

Malicious code in aaaaawa-lia-tea npm...

EUVD-2025-143557

Malicious code in akeeee-lia-tea npm...

EUVD-2025-143629

Malicious code in aawa-lia-tea npm...

EUVD-2025-143588

Malicious code in abuuh-putri-tea npm...

EUVD-2025-143228

Malicious code in awaaaaaaa-lia-tea npm...

Malicious code in tray-iutup-ubiap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5463dfe7360e310458714974e67b7b64fb9a6410ffcaafdcc1383e4869d6e5b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3e0c8f2a65a4e4366f7fae02059acf31650b331b4dde12cc5baa2c291e5d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jooee-banut-imububr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2fb2a6247ac868ebadb639f2f40b41e0523ca5db9ff95845a2aa20a6d4005a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimn-satib-nbib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0547383db2a4287dd09e587dfb764af19031babceb2cec08c203f974c23a926d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimuna-safiagiaf-afcuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cacc6b04f297a304e3fd29293c085f16633ebb14da7ed59d831b9d3c249aed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f4be574bc30756a3dcbbc08a398e4734480564412858714c15a89e6878d990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabi-iuvac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c169b1c27f4d82a4cca6ea3c826a14042d5c28ebf714e0526a935f6e95a68083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfui-dufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8424c1a0d4826f1d2c52ec7f856e97c1e01d279a16e8b84d36af6ebc46a27712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-saufai-daufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5c8d5e0e2e02260dfd54e8bc5e02272d425785f1c7e675e6dc9d73fb23395d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-sjdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a18c472fc79bff43706efa723d9eafa6052e63b72e730b0f95364698c0c1a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognbamoah-agavosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e9d151269e3b3be4d8375d351c65150748b1870401601499a81c06bf6af8cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143587

Malicious code in abuuuh-putri-tea npm...

Malicious code in poglymer-ognmh-aai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3a0c71ddae2e79e71cb03aa73e0ad189059b0eaacb0e7fdc9c8e0bc7d52575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-aiaavg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc9012c96412a2c350600e5a7e612173717fc2c6ad313f9af35e412ead9c8b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaj-radaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13348d1e9b5daa7c79745eb375795450c0b0364e97a406dcdebf357c2c9f5a3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...