EUVD-2025-137016

Malicious code in riya-48 npm...

EUVD-2025-135737

Malicious code in tearich-new8 npm...

Malicious code in inul-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17836f53d27b300f8d078df2a2c7688d828f15c6da3c68073804cf93596cfc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141697

Malicious code in haritono-poke8 npm...

CVE-2025-20010

Use of unmaintained third party components for some IntelR Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalation...

Malicious code in ita-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898525d264648b2f2eb9509a1197b843a91f8c927689960c4c39229e7bc52292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df38fb556f82092704a12444a14bec7582f96e378302606aa8fd97f77f8d760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce86d8d51739c31f3debd7050598b48e692365eef172fed550267e2d7252b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160849 Malicious code in muklis-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46af3ef6492b69b5fec4a13291ad9ff5686529034cbfb3c5603a4de75a9133bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160812 Malicious code in muklis-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1178e3c0f3bd7ce4923406927a1543ce4a692fcdf9534db2891f8fc4a5c5709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170600 Malicious code in yuda-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc65ae54958919ac7c3ac10371714a0e16b3b8ce06a9aa167219ab1543740ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-148975

Malicious code in teagood-sukuna8 npm...

Malicious code in abang-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de499a45f9b4284caed50672f9030b53a425ab55505d5c6b415fa0e05d11e3cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad2ec8b879033f7dc6a6341b21071ec9cb1de76a6de84fc69f85061606f2d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164920 Malicious code in rita-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10af24b98e7c37ce901f4cd4d98b1094582d5ba963cd5e36fecb46239721695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156256 Malicious code in ilang-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a8342b52fe548b0ca1386ba84897957d56b9f5b12fda90e97ff0fc592f243c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-149564

Malicious code in teagood-nakama8 npm...

Malicious code in dia-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f081bfff41ccf89ee951fafe636555c3e86c6c719cf6ace4ed90c41564145822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9508b9a417471b3af8ded6f50a1f7e97c2d9ca74d1b7234a0421a7c1f8b22fed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ec54c14dce5c425a195ddee454edde81c2afe1f460dd4e8e13fd7e1dd889d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...