EUVD-2025-140419

Malicious code in lia-24 npm...

EUVD-2025-141308

Malicious code in ira-24 npm...

Malicious code in hokage-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2fe02864bc1d348385f2cc028faee685996b1bfea2ea2e6020d485af86504d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174760 Malicious code in hokage-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2fe02864bc1d348385f2cc028faee685996b1bfea2ea2e6020d485af86504d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137068

Malicious code in riya-24 npm...

Malicious code in aril-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd9d1e0265cb119e2ac42ce065ff974863d35b84fdb1d766a6660468b2a6ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c1881dd1f00fb313f7635332e2e2f8f9c4d57458fdbe0ef28febc1aa071b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47488a1540a74b92c02e693ae6d6b0d181e0b8371fde97aa064e6c4a7735a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6c43e3b8212a2d868a55a34d390d573add4a7f26f48adfc55dfe199d4243d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf08c5c4c980874aba942605e2ceac92e1b92606b7e2412468ae48ee3f091e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 895e8ed427474576d65315d3adb9d50dedb204151c3a9759915512a16938d6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beed91a7fd7ec91f5221ca81ca07ed5c1f76814305b15c14dfadade8b68f4559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4c7e52e8fa8103fcd111e4c8990207b46b8dd7592f25deef15ffe81a8f05b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45607ee12197c102a20dfee933e10086242c7ce737879e9a9edfec6c1c5cca37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde909ff96d2f5afc6572d147da91e7b050d351e148db7e9d90b7080635942e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78b8d31f5606bcc5225757c7f1bed6fcbc71db2d88df74a5fe546ae6facc322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14e078208a3bb789dbf1a692b9655d64a720bad1500540a5b302bab4b0164131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32928c7a63337004d0ec01f604f6c7451ea7931ab9bdf9d1f9c3313735321383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146264

Malicious code in wulan-24 npm...

MAL-2025-164894 Malicious code in rita-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3e2eeefa5891abe9869b0cd796d2ba1513db9e0e0456398227b031a0fe6878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...