EUVD-2025-112368

Malicious code in iota-umbra-upgrade-nodejs npm...

EUVD-2025-112367

Malicious code in iota-umbriel-duplex-selenium npm...

EUVD-2025-112366

Malicious code in iota-umbriel-webdriver-manager-ini npm...

EUVD-2025-112365

Malicious code in iota-vuepress-meissa-query npm...

EUVD-2025-112131

Malicious code in json-quito-iota-global npm...

EUVD-2025-111893

Malicious code in kronos-grus-iota-eris npm...

Malicious code in acamar-perseus-rehype-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f13b3b72eddbdd6b698b8dbe987a04af1fba5606494eadc3fc663de33f32e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-iota-grunt-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a774dfb8c1801bff6640839e466dffdf8f5fb9e3ddd4f4119baaf7c882cce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-yildun-iota-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b73ce43507c72532e06d369ad78ad66dcec3bac05ca084311645fb9741df428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-rigel-child-process-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19ad6fbdcb00165d7f66f057681a85b17f94200086933314c24754656ab7969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-upgrade-upgrade-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7eb7f5199d42872864bccb85bed6da5647e35478b981e790fc8cdea403f99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-celeste-rigel-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d6cbe3104473c89681dcb17aab589481bd73d3e1aba87657a38f2fcf233299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-iota-pipe-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6704db381e370c13375724452840d7934ccdd42b0c11abe9e9c9e1356ac4777c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-deneb-quark-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de80cbfc864aedcfd8310d41fddce90d2f3a5fbb40bd00045b7d081887b66bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-event-lynx-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b31d097f97b245a36810ad6bb745e92e23442c4ff914b6c5a8a2b4a1438923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-helmet-express-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42282ed6206029f07bd399aba888e5b4efff6d0382970bd2d500ca5c6b392656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kastra-pino-equinox-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda6bdcbe3cbb6ef8ab1bfa09ae585d6cc0e53b722c68e483091d717214b52b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-thuban-centaurus-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deee308073cd092d17a74292e5cebc2292e92286732c43f143f213de23e65479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-start-iota-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7acdaa494b3ea3a94bef6251589986bbc15dbfefeb3734679f22bf2081462050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-iota-version-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd24e03634d1bb12d9b82ed857475bc589f4c6518d21d8e2ba9714281b6134d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...