MAL-2025-180300 Malicious code in teate-thy-sonic-dodec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 648e88313aa443d876f0b246b884a1d4c996da2bc430446af3f18ef9fc79a286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180639 Malicious code in teate-thy-sonic-lepeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20082f10f6c35c2708b3f4a5a17777da0ab038431132dd434caa633b6c9beda7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180571 Malicious code in teate-thy-sonic-jonmih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24469f5d705224c71d20d8f779e531515b8d727d31a9b77913c3e5565cb3d855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-132815

Malicious code in teate-thy-sonic-juse npm...

EUVD-2025-133370

Malicious code in teate-thy-sonic-daefu npm...

Malicious code in teate-thy-sonic-toove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f287efea9e4d195bb7761bc0865dddc285327efac7f82144dca07331a2174b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-afuti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d47bf7314b498fcb9ea63f29c2c084c7467b0489cbd2f34720b70acc308ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-cujmov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1287c0bc4b37df04a2a6d1b45d45dd50d4299c70a0808420be13c4303a8b5e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

1-mutfru-muytio (1.0.0), 12-mutfru-muytio (1.0.0) +20071 more potentially affected by unknown CVE via anakjalanan (1.1.4)

anakjalanan NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on anakjalanan and may be impacted: - 1-mutfru-muytio 1.0.0 - 12-mutfru-muytio 1.0.0 - @mipta1/aisax 1.0.0 - @mipta1/aisx 1.0.0 - @mipta1/aizsax 1.0.0 - @mipta1/aizzsax 1.0.0 -...

Malicious code in anais-papoa-0pipaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9496deded79330762af888489f9b6951240b841947d9c85ae4c95341bbc8ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-roprur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514105dc19a8681f1a13c73289bcdf84be90917af894168ae5a1414d2ab13e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anabuyil-inupva-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b2f038507a6d08974b474f577d28e08686363c3207b9d234e14ac9b38748431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-132005

Malicious code in teate-thy-sonic-zehnap npm...

Malicious code in teate-thy-sonic-pobob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94ba37ee5a40c58fc4a0d0b800fb558f5e303576690c868a4b11dae1c135df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@miftaikyy/miftaikyy (1.0.0), @mipta19/nitrotea (1.1.4) +5 more potentially affected by unknown CVE via nitrotea (1.0.0)

nitrotea NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nitrotea and may be impacted: - @miftaikyy/miftaikyy 1.0.0 - @mipta19/nitrotea 1.1.4 - @miptaa02/jisfd 1.1.4 - aibopna-mobile-aramafaui 1.0.0 - aibopna-mobile-aramaui 1.0.0 -...

EUVD-2025-133418

Malicious code in teate-thy-sonic-cipfu npm...

Malicious code in kisut-fg-dufadyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b552fe26884e683fe475dd66758aef44f19eb0de562bc83a9dbf94e2dd9a33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-pazune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555ae62ff2c320862125ce090cc4d646a736703a54d4527a3c0bab5484abb380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-fikus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91548a849b42884c065ca8bbcba7f62d18dae0795853ddfcde45e8d6bd1b09ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-lethi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3243eea45a65ef3a7a387fe07ec0cb321210145320ee31856e8ccb041577880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...