EUVD-2025-87724

Malicious code in xaver-rangginang55-miaww npm...

EUVD-2025-90927

Malicious code in jaja-gandul95-miaww npm...

Malicious code in ridiculous_gazelle-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0741fba236a4032664d6262c17d8a780ee1efd4f5f1092707748091c46c908de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in devoted_elephant_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ee4c340775b61faa3dadfbd70b3be789b1126e2718173ac4d806971ea63fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104410 Malicious code in irma-sasag89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac69761710db85447660f71b0735048c49f3547f9eba9af697789a6d3e15e8d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-oncom100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d6a7713b5d3a2b0280f80c5ae70c669665dbe099fa2431e26996a08162c73fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67191

Malicious code in rifqi-empal34-miaww npm...

Malicious code in hendra-oblok56-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0eccec94fb464771fd6b8a70693c8e2f983aeaca126369348df5fb13c89ca7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary-rose-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b727651060212a60cb1256b61b518f24b0dc2b142602872a55457521669cb78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thunder-iris-jur448-project (npm)

The package thunder-iris-jur448-project was found to contain malicious code...