MAL-2025-178299 Malicious code in riya-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 201d22bc2e9b2cb3fd179570542ad6c96a5829f8a1b7e0fec5ad07092def19f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135010

Malicious code in wulan-2 npm...

EUVD-2025-137078

Malicious code in riya-2 npm...

EUVD-2025-140424

Malicious code in lia-2 npm...

EUVD-2025-135009

Malicious code in wulan-2 npm...

Malicious code in ira-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c96cfb1f54d9fac8dd3e500f0561acf3fde384450fed86282c94a26514e893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23c670b48e1d081366214b2b1d81e834198689e81505b9c378c4ebb8e00a429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141313

Malicious code in ira-2 npm...

MAL-2025-175839 Malicious code in lia-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed90ceadf6cc856cdbeb306b136d40a27412e8c48ed0d0b7dffab3fc70d5aeff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-35963

Insufficient control flow management for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of...

Malicious code in ilop-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f33e4bb897f02042b461d789e2687e57ad410bcd283e8d2a1f3683db67127c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146225

Malicious code in yuda-2 npm...

Malicious code in aril-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ef53c3449b8f7a49a020da788bb2d1bc69f8e3157de404f059e127a481f2ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d6e1b86b188e31bf31f73f19d248c7e67598f2cac1259c80e03883e13cae57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e537cfba2a7c2395e256814d776984a7fbfe40057ef9a8c9a3864099b05bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5168c94a2bf05dfc04dc09c14394384c6ba099e1ab73080b80d9203452de2df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f849ac43beb6fde6e25fdb5afeb3a7963a90300e64cd68eeca0765cb27ba67d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e078e5cee8a0de790ffa12c0dc099cbbda9d7daf946bb6da8b893b3b93377438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156219 Malicious code in ilang-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7c0751410ccf393639a0a2fc04e6b4c5e410c53f0beb573e4d8c90a0ada37a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164288 Malicious code in pitra-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ff4396a63cb285bcd0b848a63e178db17af12fecc1a1cae51059f5865ca1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...