MAL-2025-180643 Malicious code in teate-thy-sonic-licbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8b22e8bda18e91bc9fb94faf1fff35f4e5bab97c795a2d3ec42f07921c8585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-131938

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code...

Malicious code in nuilva-dakdre-aogdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7b1e02cf831d9a7a3e6a68ee3f1c874e7ebd6428964eb7ec4dd844a00c8a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3979c67b83c9c07dbe4325c2d4f563ebf9802ed144180504508a801de85b9b92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-aig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f481b76a62a821eeebeed3828a486c02609c2fc01cc477966f8cc12cb28ffc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soi-vanbds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118f6b3200466c18f18b2b63eab344ffda6731da8cc614edfd3f876c42c2924b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tufa-iniuatida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd0919847ad76ebbfa082bbf9d9b2fd6db3e117bfbd9d522dc2c69193e117b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b988e67ba2cf964e468cadd89aa148131cdbf05eca57d5352f7293bf1d6bf457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimia-satihb-naib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ce7b681be23d288cfb89541c6c45cc14a5493f864ee8d86706a635dd7499d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176840 Malicious code in nuilva-dare-agajafgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fce351e723f6d54497c75f2d381d8f706e397606c6b589feab1beb53aab9f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178261 Malicious code in rintono-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22bcec689bf541b9955a12713b9d3de5741f9756cc7df511a72e50f712c954a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179298 Malicious code in unimana-satgub-nainab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e088aa01cee90726df8eba7accd4a8b28b8f007f36d46ed1deac675a9589d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-142011

Malicious code in goodaan-ngafsa-nfuagi npm...

Malicious code in riya-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f8aeb8d6a8c0643c3f19c3b9458fb53189fc9b0f2fb13385e3fb295a606ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426157b02f97f1d5957632904c226e5fe63f26142f598d4ed5a9774b439b429f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiva-tumva-dialu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da4e726ea384f811221808315fcd3204d87702fb07ed787e49061bc9f4956aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-roovsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35946e3412cbd5f8e9e9c2fe942da6e7209224efcb5c175bde5e71acfb126db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc3d96d73faae58cfe1ac3c3892e8944714686abedf9ba9013acc779382b03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodain-sanvgaunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d3ae7e37f89dc4de1c1f358b4fbd2856de89c9de6fd8fb57d089d68bafee18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudufui-fadabida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0abb9835d99545b9dfe1933ba6b48c0f7c5f17c6ed0783f470dbd6ce0b64c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...