EUVD-2025-66709

Malicious code in sinta-mangut33-miaww npm...

Malicious code in zul-nasipecel85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905b2579b173006991673e0ef514d4d93efeaa26957da42f3f9a6b4ba425085a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-rujak99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6bb4b4f32c5e268775f82e92c34e1ab133503077abf2bfe64046e687e6d01db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-tongseng90-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3542c667b44b3dbcb8bd6640376a8c5dcd4450c1a99cc0ae117829815e7fba97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-66355

Malicious code in swiftdeerz3n npm...

EUVD-2025-86041

Malicious code in fitri-keripik16-miaww npm...

MAL-2025-85344 Malicious code in fadhil-lapis64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e53976841bb87b6b7bc71ce019eaa733ad4bd99561c1b42295aebffe0bfcd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89286 Malicious code in oktafian-rangi27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff7ce86a3efe5922dd96c363a9e093a32a546d20efa812df3e5c275979d5b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-rujak1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e77a6f9fa361d90ef3661713c0ae7cc8ba156e533efc894cec9610be431c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-85180

Malicious code in kresna-peyek73-kyuki npm...

EUVD-2025-66094

Malicious code in tomi-liwet56-riris npm...

EUVD-2025-85469

Malicious code in irrelevantcuckooz3n npm...

EUVD-2025-86763

Malicious code in citra-getuk85-miaww npm...

MAL-2025-88590 Malicious code in nadia-kepok45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e9f1fe13ca3b766df0304611888eb4bb941982300492eac5a1f9da03bab553d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83201 Malicious code in andi-oblok61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30977bb2827be3ec6ae933450c6c9ab3cb383010fd13c6576aadb7f431aed297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85034 Malicious code in electoral_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5e39f33b60a3e44c56705548c30e7a8d70b08d6dbe57cf4769c9800b9933ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11986

creationtimestamp| type| source ---|---|--- 2025-11-11 04:22:06+00:00| seen| https://bsky.app/profile/potato.software/post/3m5dbypdu552r...

Malicious code in vida-teh64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5abd37e1142caf2d3f5eab3da63f65bf2885e67c662d015de51adfc0d5b952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-keripik45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18ed86cc0f85944bb19f095bf79756a2f422b9e73c6d029b11ca8de6d160fed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cloudy_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a98fe6b8bcd6fe5b4d4e5bb18aa6dab5eeedcd6d320d19f4abb5c7e8e85dab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...