MAL-2025-175643 Malicious code in ksai-kilota-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc914b670346ba47b089389f2e8cffc4765e4ac7256558402b9a2c3a07638c63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139017

Malicious code in poglymer-ogaih-ai npm...

Malicious code in ksai-kilota-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc914b670346ba47b089389f2e8cffc4765e4ac7256558402b9a2c3a07638c63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-62453

Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature locally...

EUVD-2025-146553

Malicious code in verify-ai-aiusamakuilai npm...

Malicious code in saku-ai-ups02ik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 329ddfbcf07933eebb568942899d666f3dbee78a821596bdf42bb913f237af7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146555

Malicious code in verify-ai-aiusamakii npm...

Malicious code in digo-kaimo-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b44fcd5e6eff2bbcf0844ebebd30bcbacc33e65982f237fc844af935dd3bf9cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokiragne-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13bafaeed32e094d85619cc5a6f88e8b8dafa7e240451e47d8535b2dbbe46275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimoi-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4daf305842103b869a97565fe7e34103437580e9d1bf86a7ed937a8cea9aed4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ai-aiusmai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822424767d3d1c45655de493bae8ec045a1b89baea9b267d166013aeb0bb6d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146554

Malicious code in verify-ai-aiusamakuii npm...

Malicious code in saku-ai-upsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b2dc2531f9fb99d8c23d5d3ac58b09fce4c6dda5900c6a41b33fb2547f603b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-ai-upusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 720b8ee13ca3b3c5752b7df41d6903d98ccd752cfe623087d6b711ca898d0995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kamoi-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602008eeb8b3390c2a5ace94fe8de34fac153f63cb24426d970e3e7cbd42ad1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-ai-ups012giek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba8605bf27e9688b7f0975afabecaeab89281644b427fd1435fa2aca313e9cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ai-aiusamakuii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088ee8ac2b4c0e2c741bd22d0b905e6670f2ea7903ff0653960ef10a8f22a52a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146552

Malicious code in verify-ai-aiusmai npm...

Malicious code in verify-ai-aiusamakuilai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddf1ca260532af9189c1e30b596a682933d14f6d7b26804066d66e214a49cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165590 Malicious code in saku-ai-upuasoanio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31794e611169a91339df02a4a30040782774064d1ab90588e66e076b03031cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...