MAL-2025-180961 Malicious code in teate-thy-sonic-tewsor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d5a0181564259139bea2ebd8acd73f20e564ab921f81ff0e8654ad9963c4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179444 Malicious code in aibola-miloipe-apmamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31aa0c57511a721be0d35f80f362b5865a45371698ec140076164d18617511ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180542 Malicious code in teate-thy-sonic-januk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62a2c863ff496e0525a02fd01edb6917b36ecbd2a45eeba6b3f9577bf9e7d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-edawi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc4236a17b83f2924a47bd7e0cf74c446897e418ed475fceef10ff7784b80d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-131938

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code...

Malicious code in nuilva-dakdre-aogdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7b1e02cf831d9a7a3e6a68ee3f1c874e7ebd6428964eb7ec4dd844a00c8a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutoila-joiluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6081353c956eeaa99e2be930ba7399cd718abc2d55063aac4070a0dbd337939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmiam-raviav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37f287a621d3652da96ba813d668e9c31d6667f7d32d0c8f8a2a318f0cc14371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gafai-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 654f6dfb91b675e52ff2e211bf0b9ebdbd512ce1d7a44f7f3b5bbfdf6fbc8b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3979c67b83c9c07dbe4325c2d4f563ebf9802ed144180504508a801de85b9b92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-aig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f481b76a62a821eeebeed3828a486c02609c2fc01cc477966f8cc12cb28ffc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soi-vanbds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118f6b3200466c18f18b2b63eab344ffda6731da8cc614edfd3f876c42c2924b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tufa-iniuatida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd0919847ad76ebbfa082bbf9d9b2fd6db3e117bfbd9d522dc2c69193e117b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b988e67ba2cf964e468cadd89aa148131cdbf05eca57d5352f7293bf1d6bf457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimia-satihb-naib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ce7b681be23d288cfb89541c6c45cc14a5493f864ee8d86706a635dd7499d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-142011

Malicious code in goodaan-ngafsa-nfuagi npm...

Malicious code in riya-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f8aeb8d6a8c0643c3f19c3b9458fb53189fc9b0f2fb13385e3fb295a606ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426157b02f97f1d5957632904c226e5fe63f26142f598d4ed5a9774b439b429f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiva-tumva-dialu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da4e726ea384f811221808315fcd3204d87702fb07ed787e49061bc9f4956aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-roovsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35946e3412cbd5f8e9e9c2fe942da6e7209224efcb5c175bde5e71acfb126db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...