EUVD-2025-133467

Malicious code in teate-thy-sonic-burlu npm...

MAL-2025-180921 Malicious code in teate-thy-sonic-saded (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a81735df5599d5d6a5570774d79e19b0d6354ef802655efae0ca35baf918886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180520 Malicious code in teate-thy-sonic-iralu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0165a3b5055f17ebfd3e9e05a0e761c6d85798f751477e87bd3ec31a64f8bde6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179444 Malicious code in aibola-miloipe-apmamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31aa0c57511a721be0d35f80f362b5865a45371698ec140076164d18617511ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179520 Malicious code in anais-papmoa-0pia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284c7c0f3318106daeffb0218424cd355124f9327f4af6dda3ab3ebd98f1ac05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179688 Malicious code in kisut-faifg-avuffigub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b598b3ed62f53d212984b48fe37500003760b46b396018d6575bfd50d10c30a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180542 Malicious code in teate-thy-sonic-januk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62a2c863ff496e0525a02fd01edb6917b36ecbd2a45eeba6b3f9577bf9e7d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181049 Malicious code in teate-thy-sonic-vijwa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41039ca0cfd9084686aa15a4fadf75078214a1510031fff2986d909cc9ebd2ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180554 Malicious code in teate-thy-sonic-jidat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ca2a52574ab9f8a4cd7f0a9d06dce578ea9fc5dc5b1bb281a78e1a047848e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180154 Malicious code in teate-thy-sonic-albu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a6c93c379fb110dc762a2570dea9bbf13a5b5c976c66747133d94e8509c1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180961 Malicious code in teate-thy-sonic-tewsor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d5a0181564259139bea2ebd8acd73f20e564ab921f81ff0e8654ad9963c4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180643 Malicious code in teate-thy-sonic-licbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8b22e8bda18e91bc9fb94faf1fff35f4e5bab97c795a2d3ec42f07921c8585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-131938

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code...

Malicious code in goodafiun-tufa-iniuatida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd0919847ad76ebbfa082bbf9d9b2fd6db3e117bfbd9d522dc2c69193e117b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fbvpvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 103e5045c6b8cdd9a2d6b3059890c96131553aa69c4b274d4de31029782f76b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugab-ivaifo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bdadcc4fc0d423f602f7f38de499ba63cb65275ae7ca3908c18831fadaa08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc3d96d73faae58cfe1ac3c3892e8944714686abedf9ba9013acc779382b03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutoila-joiluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6081353c956eeaa99e2be930ba7399cd718abc2d55063aac4070a0dbd337939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-roovsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35946e3412cbd5f8e9e9c2fe942da6e7209224efcb5c175bde5e71acfb126db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3979c67b83c9c07dbe4325c2d4f563ebf9802ed144180504508a801de85b9b92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...