EUVD-2025-50964

Malicious code in xerothermic-blush-stoat npm...

MAL-2025-70733 Malicious code in southern-brown-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce330f9d75ca66bd635afd62b64f2f94d82c38edd77f72930ed65e4db42d4e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67631 Malicious code in deaf-moccasin-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3d6fb230dabddc5d739c51aeb70a1c009588c2dfce5ff1b560b2f33315285c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53386

Malicious code in main-moccasin-baboon npm...

EUVD-2025-54642

Malicious code in embarrassed-beige-meadowlark npm...

EUVD-2025-53697

Malicious code in interesting-jade-crab npm...

MAL-2025-69793 Malicious code in overall-cyan-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664b029f304eed579b974cd8bd5abc4e426bf14f4e858dbf00c19a1af8075b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major-black-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64be0bce9ec1210355fec83c9e869a56fbe0b598e55aa6293b8959bf145c1ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53728

Malicious code in insufficient-red-chickadee npm...

Malicious code in mighty-turquoise-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2539b34cb73167f8a492d043d976f9a9bd3ceecf289c4157da03492de744ae7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54985

Malicious code in defeated-lavender-moth npm...

EUVD-2025-53514

Malicious code in liable-red-dormouse npm...

EUVD-2025-53843

Malicious code in impossible-orange-rodent npm...

EUVD-2025-52817

Malicious code in passing-ivory-heron npm...

EUVD-2025-55777

Malicious code in attractive-tan-landfowl npm...

EUVD-2025-54640

Malicious code in embarrassed-plum-ape npm...

EUVD-2025-52197

Malicious code in sacred-silver-antelope npm...

EUVD-2025-53975

Malicious code in hilarious-pink-angelfish npm...

MAL-2025-67234 Malicious code in close-sapphire-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbe72a172ae6bf06d7def88d6187e24e9f75de9bb4076b297926991c3e37f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68627 Malicious code in handicapped-blue-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12ac73306fa2d1e9649e76448b3a58fc5920c68e06ea10108ed3b65c39b5db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...