Malicious code in ita-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a03d72b26ff1b3f023d3f4379d2bccdb8d27e8d8c22a0ae59e47e655b216e658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be543764db9393046ba5267dac86781cf8733382d224e34099db96743a8576b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304925fe90d69d1e51c6144e55a1c0a9dcab16f95076f6b527d6dd279cd68298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d24194292ac1c61ab534b256b7b55360f5b7f7a412c72e378add315b3006db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43392d688eff4d8d0b742ebe386ee2aabd3f3ba6b7dc59748313605bb426545c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6699a89b16b0f6025ec906c707c7da9e40163e6abc20e8803350a810411b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146228

Malicious code in yuda-17 npm...

Malicious code in cinta-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59bd6bb2b3aa6186d6affc401b7b2314692c304e39f47b2dd0aafbd368343f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26dfcffed7d647a26fbb9eb5dd116630dd9506c911e7c6f6adb3ca642bbe24e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a31d4c2a35819d9ffe449b4d7231144b8b504df8029f4c538f6c6fe237aa76c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 985fe8a21286c99371ab03a21b2273645f18c1ab1df00cd32347cd6794a36701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0785cc17957bc187c9b59dd34b7cff516c1cd0222618e29de555cf9e71b539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164285 Malicious code in pitra-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a776d26b71757e903946970a376375cd8a4aebbf157843fae8bd2c5f32563997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74223

Malicious code in soleguppyscarlet-17 npm...

EUVD-2025-74388

Malicious code in outstandingsawfishsalmon-17 npm...

Malicious code in outstanding_sawfish_salmon-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9186a218c1f6b86a6b6771e896c03920ed8f5ed1d9477119418ccbb4b2892cff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible_grouse_harlequin-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e356352c14bb9acd8d2be6494f70c04f3cb2b059d970fa71fc726085fc53e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77458

Malicious code in yummywallabyharlequin-17 npm...

EUVD-2025-77441

Malicious code in autonomouswhalesilver-17 npm...

CVE-2025-10576

creationtimestamp| type| source ---|---|--- 2025-11-04 03:00:06+00:00| published-proof-of-concept| Telegram/SqKMby9fFsh1zK4WZV-vSihQoPWXNeEg2kJVssx66CpWo24...