EUVD-2025-141290

Malicious code in ira-40 npm...

EUVD-2025-140401

Malicious code in lia-40 npm...

EUVD-2025-143514

Malicious code in alvino-40 npm...

Malicious code in ira-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d274c8e67d49031e9a58fcccd6adb5ec3995e8e87a36a67fb9bd1e89d55958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1410a8a98d25535da896ed21562b0a225a5de0d6571fc5c66f21493eced9be2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178322 Malicious code in riya-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf86d73b336741055705983a06dbbcc4c98bf649734a6b9815818b6de41cc1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174778 Malicious code in hokage-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2ad5a07130a5849dc61fb44b622cca08906e38909fef57b9fede2c3aa602a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0d0cc6a08c3adad3e053a69c8ffafd4ef56c14d50ff1e1981a2e2f41c6f9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146246

Malicious code in wulan-40 npm...

Malicious code in intan-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3189d13ad2bfd58d57dd094e5663c6fbd6c51d565cc8821b30c493e32de127b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8487d37ee65e0503f7c87434c303c4c2e88b07102d4a123b088206a4d7e597fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64d6bff226bb8a8cc1a4f7de9f0dc98224c1bf95dd33425713aba069664551c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958e22e91ad20e03f90897989c606e2a9f1767bb76d82b2a9dbae914ecd1639b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d6d253741987c6ce03735fa226dc07885df2f7d3ea534f51957a4c1a9a4185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1640dd5d007752f05c3b1cec429c092137ecf81811f23643867d119f2b51b181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f50d6c6bdd2cedfaf7bbfe97c8bf0c7ddff9c3cc1c0f88b8f1c98d9b851bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155065 Malicious code in fauzi-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958e22e91ad20e03f90897989c606e2a9f1767bb76d82b2a9dbae914ecd1639b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164311 Malicious code in pitra-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7281f90aeef2f0fcd84bebd782cb2b5b782fc629098237b197933d1be95850d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5617f4b1b2d746bd652f17ab0e7ab5e2c4d4ce1ddc577d81d0616df63d00d0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7746a0de99b7352bd68d9965ec846e1a092681252177e492559b9f6dd3c37a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...