EUVD-2025-71666

Malicious code in associatedwoodpeckerz3n npm...

MAL-2025-98782 Malicious code in leading_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eafd010fb6f42eae3ce5fa34e028f6a9e0f3286c7e5f9a947e0bd9f99d2b9134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@aesx/aesx (1.1.6), @bocahajg75/bocahajg75 (1.1.5) +537 more potentially affected by unknown CVE via kellymanteasproject (1.1.9)

kellymanteasproject NPM version 1.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on kellymanteasproject and may be impacted: - @aesx/aesx 1.1.6 - @bocahajg75/bocahajg75 1.1.5 - @bocahpripayer5/bocahpripayer5 1.1.5 - @boelboell75/boelboell75 1.1.5 -...

@kellyman17/kellymanteasproject (1.1.1), ahahscroot (1.0.1) +42 more potentially affected by unknown CVE via teadungdang (1.1.6)

teadungdang NPM version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on teadungdang and may be impacted: - @kellyman17/kellymanteasproject 1.1.1 - ahahscroot 1.0.1 - awio 1.0.8 - bacoritul 1.0.1 - basuki 1.0.0 - bilibili-teapod 1.10.0 -...

EUVD-2025-72673

Malicious code in bayu-teh94-pore npm...

dhrav1 (1.1.2), irma-dodol78-riris (3.3.4) +2 more potentially affected by unknown CVE via dhrafortea (>=1.1.2, <=4.1.4)

dhrafortea NPM version =1.1.2, =4.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dhrafortea and may be impacted: - dhrav1 1.1.2 - irma-dodol78-riris 3.3.4 - joko-tek48-riris 4.3.2 - kurnia-sambel16-riris 2.3.1 Source cves: unknown CVE Source...

12boowjljk-notthedevs (1.6.9), ahahscroot (1.0.1) +14 more potentially affected by unknown CVE via 666-tea (1.1.4)

666-tea NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on 666-tea and may be impacted: - 12boowjljk-notthedevs 1.6.9 - ahahscroot 1.0.1 - bacoritul 1.0.1 - basuki 1.0.0 - df6fqftol9-notthedevs 1.6.9 - forilcuy 1.0.1 - gasmbut 1.0.1 -...

EUVD-2025-62523

Malicious code in priorduckz3n npm...

Malicious code in realistic_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93725908ba4bb58b25bd88e18f1d67bf94cddcf75dfe3f8f148533de92e13bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64067

Malicious code in feministcamelz3n npm...

EUVD-2025-72819

Malicious code in yappiestthrushrequirement npm...

EUVD-2025-62388

Malicious code in quintessentialperchz3n npm...

EUVD-2025-65432

Malicious code in addedmartenz3n npm...

EUVD-2025-63287

Malicious code in liquidbandicootz3n npm...

EUVD-2025-65722

Malicious code in universalbarnaclez3n npm...

EUVD-2025-86169

Malicious code in exoticbeez3n npm...

EUVD-2025-84462

Malicious code in ocha-kue78-miaww npm...

MAL-2025-92052 Malicious code in wati-menjes73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5757336715e3a8286548ec0dae829091607662b137d72e90b0096bee19b1997b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-86041

Malicious code in fitri-keripik16-miaww npm...

MAL-2025-83705 Malicious code in budi-bubur44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef08c12b080e6ee77d9d88a141d532c9114616f07315bb1531f0d3253da80af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...