EUVD-2025-141532

Malicious code in hokage-13 npm...

Malicious code in riya-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936362886453635fa0be1be2ec45e9ece18319e7a0e273011b2ed113b02b1948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174748 Malicious code in hokage-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f05b38e64c6cdebcc247e594fb08cd9e3fd366e6bef34b2c9c4ea7c77ebf10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172762 Malicious code in alvino-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8d45324e3481e0aa4d53a74f803da1a4064a51a2269f6a21ab8867b1ca23da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137092

Malicious code in riya-13 npm...

MAL-2025-178292 Malicious code in riya-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936362886453635fa0be1be2ec45e9ece18319e7a0e273011b2ed113b02b1948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174951 Malicious code in ira-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46fb25c9e79a081c630061039ebd3127969a224ba4df78c4994371d999e23077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa471e5a54a351be2f9471640d90aafeb53d317765227fad51573989f840e342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10686d08dd1f746762135148e84f32f9a845578352ff3f4297617a34c8879a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61ffdc19b60ff356ddeb3384b08a6265d124fb9ac65b537df49587cf021d7c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e434f7a849797bf708a48fd78a4aa65dae20f2df8c9f57cde635147f01f4a129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd6003bf6495411bfd30f3cd1b8504d514f7033c597ed2d201a7a94280f393c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146275

Malicious code in wulan-13 npm...

Malicious code in aril-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e4a6fe4971b72ce507283f245513c18698a155570733ae10c4acfb4610d869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d8352085a33a4f73a81224ed7f2c1841a9f7b9861304b2e49189ae067ba923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160796 Malicious code in muklis-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74ff3a3fb31f5cf05a334fe301f1dd6f53f997afc69b3330de99d9f7053d431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152451 Malicious code in alvira-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88104b3806983e5cc19e7b1a134182cb1e2d733a27ef0448bca26a1eb234535c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e87bb12d91e16c2c77557cd56dc86f174ddf56530b37c810faa327d75d26cb6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146232

Malicious code in yuda-13 npm...

Malicious code in wulan-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f26e1b87748da6dd1c8712558634925d6ab7c6f5e64cc41bb6ff3a8dc67ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...