EUVD-2025-141300

Malicious code in ira-31 npm...

Malicious code in lia-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c822f380ed60615955c7e8f9dc061256207d584089024d0a2a3492e60afd6995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d81629a108c1c22751904c02fdca540020590588011d855c481b9775f8a2895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6209f8a069b183c8d06b76de47c523e48634ace986b86f260cf2317f977601f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143523

Malicious code in alvino-31 npm...

EUVD-2025-140411

Malicious code in lia-31 npm...

MAL-2025-178312 Malicious code in riya-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d81629a108c1c22751904c02fdca540020590588011d855c481b9775f8a2895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f61d59af7b14e802bdfd6d34d56279bfa4fe093a86b5bb9927a4f8a9ffdd98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4d3a0d5e55dd3d8bf81c11b448334dc264d48a3c2b64bf574049e6209a943a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146256

Malicious code in wulan-31 npm...

Malicious code in kentung-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313dc870bbcc127da90f60c40c356d8b6328e80fde07d2c421b6a78303f8e501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51144bd47256cbcd5cf48774d43f5923ebb05f9ff0aa74997316d70f6a18cf2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (=1.1.6) potentially affected by unknown CVE via ruji-31 (=1.0.0)

ruji-31 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-31 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165257...

Malicious code in hafiz-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c03952b5403c99b794fe4a9c92ccce3cbfc09812ef05a233bda94c3b3142d9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2747c75eb82160d4a58aa0c1b010aaf8dd7d9ce3b4a594760c4a81d20dfa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (=1.1.6) potentially affected by unknown CVE via muklis-31 (=1.0.0)

muklis-31 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-31 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160816...

Malicious code in icha-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d541b202d52901bd5b35fcb6f8fc2a70df9f3a58a86d47e70f683a50f3da1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155587 Malicious code in hafiz-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c03952b5403c99b794fe4a9c92ccce3cbfc09812ef05a233bda94c3b3142d9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160816 Malicious code in muklis-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0acdbece11216d9e2fb4ba455de5a6648246332116711dcbaa5d327f5713081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159628 Malicious code in manda-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ae87e183c43a35ba9ebd01ab5c4cfd66bb5933b491c27bb6a3d5db7fe84bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...