EUVD-2025-139911

Malicious code in nokire-kushina30 npm...

MAL-2025-178315 Malicious code in riya-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c06393078ab01499d4dc9be643be08885b3f232aa4449ad1637b973ffb06fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174970 Malicious code in ira-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4e2dc723998f885fc6b543752c982334b21bb05497addc952f3fae19e6e81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141510

Malicious code in hokage-33 npm...

EUVD-2025-141296

Malicious code in ira-35 npm...

Malicious code in hokage-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76904493617489a581b85d16f79c848dc3e8589897d9aecb6fe10846e0c96d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6f78612ee844c31f021244015d21b9e0b616b75792a73700a840d88806ff5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141512

Malicious code in hokage-31 npm...

MAL-2025-174767 Malicious code in hokage-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d25c4211688d818f181dbd2f365a0c63a7f6c7fad00f3b268066f258216800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-131909

Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...

Malicious code in alvira-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae6b71ab1249173e1d8b9140d0c3ad4eec75178ddda6b3c9b6550267ca04936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521364930eb4d57f7fac3ad981ca3260b96011a1f7e744fde3e9ad3659b732c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d23e9ab0a91b585262833113ce9626c42e5818c0a589a89077cfabeddbedd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff2f1e8f14c68bd2e9e0dcf8097521ac1f8ca529b640e07bdb2009d627df10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ef01955e3e78ad3a34e9d32f88751272a44f127ca06440ee833dc0fc86c596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78f6223726429ef764f92690e632c367291c5eabb792b710ecba598625db2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ec54c14dce5c425a195ddee454edde81c2afe1f460dd4e8e13fd7e1dd889d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1a08cf40449d303425087fd2828ec66e60a59f2c98ae9328841b7e11be2200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153c67275750824a26b85661d1658b500f7713eee0bd9249c67691997d0cb48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3116029675df219b901e45c44cd9ce4b7b3de08b1f578310252d53f1c3f92225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...