EUVD-2025-143533

Malicious code in alvino-21 npm...

EUVD-2025-137074

Malicious code in riya-21 npm...

EUVD-2025-141523

Malicious code in hokage-21 npm...

Malicious code in ira-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca39931f5676b79adb12e4d966add4a0f192e0284fec24c5df01ac5eb2d85c33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0069a882440afcae5aa30837850cedcaf2720dcd08ce6f8cc62748e721a8997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141311

Malicious code in ira-21 npm...

Malicious code in alvino-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b1a35405ae7f4dbe2451e8bd88a0f05a9ef2fe69d02a7b60d750e3de136d6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304b446075ea6e90be552fbf306e7585cd07998d06205989cf20aa15a381e2a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140422

Malicious code in lia-21 npm...

Malicious code in kentung-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da866c3e5b78398be6a453e8a175dbb76d394223a64c4fcb8e464e8a863e5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (=1.1.6) potentially affected by unknown CVE via aji-21 (=1.0.0)

aji-21 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-21 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152060...

Malicious code in ruji-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829763e7e386add3da18de20d8120173e35bd93719e2f90c345fcb68c466d84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc194ed5539aca5e70458bd4f4dd1f0f085581dfd28b9a907ae7001c0efa0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d5f59f8a652242cfa7b01241f48013f1905c8e7af2824641e2deaf7e857c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 011da5195fed85779e9392205bdb7451471710c09ad47dcf60c3655485e05d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146223

Malicious code in yuda-21 npm...

Malicious code in bitha-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3ad239355989beb71c1687573a36f917b6b9f74b5ffbc85f5a6079e4374241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146267

Malicious code in wulan-21 npm...

Malicious code in ilop-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cedefbd86e9e3fc160743282ad792c645b3c5551453755fe03a0bbe74c992e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6881f559ec0d21150806151bf41d27a9f6e624ee0b1b23136f76af606d7351c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...