EUVD-2025-179157

Malicious code in emulate-sudo-query-balance-air npm...

EUVD-2025-176236

Malicious code in stack-bundle-public-air-user npm...

EUVD-2025-175957

Malicious code in thread-compile-parse-decrypt-air npm...

EUVD-2025-179507

Malicious code in cron-rho-analyze-socket-air npm...

EUVD-2025-177410

Malicious code in orchestrate-benchmark-spy-air-cat npm...

EUVD-2025-179855

Malicious code in cat-air-xi-slow-visualize npm...

Malicious code in omicron-query-air-cold-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf2ab953418ed4cb1f746b6fb3179574ad14d8670dc1414ab46934e8199dd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674ba4908a4035106a59a61ed61aa684e04b7c2f4c0520717a06fdab3a468c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb807801807394657ab710a2793f94562efad475de199d81df1b38a02ef9e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb8b149d005c44ba6b8e380a212562249d0004f02a0c5421bb8ec89a91ce739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0d071c0694c3c22a3951e3426efb4cf3f615941f75cf4873ff20745fda0344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151997 Malicious code in air-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e26f9e9132fb1a56dc2fb99e55058b23f2de37db8ccc64c6ecfa998ebc66fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9eadfc0ee761f15eca6fc451f18550e7b97b4de03c3c7f952fc64832bf05b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ccfba40a0da81dfd53cb2480a21fe76554151ddcaeb93c1f748a4e0c043af5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91c16cd439b4359c36e0a4ad6e526260fa463e518c7d94ab12f165b345aee5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de9e814166f39ca5e801a52dc85e345bcc1149cb4de9189b7f452f64ac47fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b20660bfec93f6feb9ad6776c90a96c633ccd92f01c669ccff03104fd29f388f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf816f69d56956ae91216cced8d4e04c876c6e1eb0e17dbd136109630fc8a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91dcb0f3683e0150a9461a4ab3aff5f73426182cef11d0958f1563078997680a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cca7df148f1f1afd47e05ef5fe33345439856f44eaccfd4dc5121f957da2958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...