EUVD-2025-53520

Malicious code in lexical-red-catfish npm...

Malicious code in quickest-silver-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c585e538187ea0fef65963f6a2af96cdba88b14168c3e07c36f49fc5d5f86d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51024

Malicious code in wooden-tomato-catfish npm...

EUVD-2025-52132

Malicious code in selfish-aqua-catfish npm...

EUVD-2025-51151

Malicious code in voiceless-chocolate-catfish npm...

MAL-2025-69129 Malicious code in lexical-red-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3d7405795dc54a69eab4fe2508cd7b65b613180af0cee665c3d8c64658e4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71625 Malicious code in wooden-tomato-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3750a3b6ef1d5cdaff1e0608f627d12a3f7d4c5405e278567d01b92b4b709cea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55909

Malicious code in allied-gray-catfish npm...

EUVD-2025-51722

Malicious code in successful-fuchsia-catfish npm...

Malicious code in delightful-aqua-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9190409cca1a7bd76932e4b14af795d0eaccc3cfe72383deb05d3c8cf1f6456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55765

Malicious code in autonomous-copper-catfish npm...

EUVD-2025-54942

Malicious code in delightful-aqua-catfish npm...

Malicious code in allied-gray-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bd62c95a9a853476553bcbeed3e3f808a048dd5b2c3b7b624b9379b8350afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spiritual-amber-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc4f5d94082d509532e8f71e20e1cd25eda9ff05a84379206bc281175df88437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52510

Malicious code in quickest-silver-catfish npm...

EUVD-2025-50943

Malicious code in yawning-moccasin-catfish npm...

EUVD-2025-51880

Malicious code in spiritual-amber-catfish npm...

EUVD-2025-50291

Malicious code in entitledcatfishz3n npm...

EUVD-2025-50136

Malicious code in gastriccatfishz3n npm...

MAL-2025-60371 Malicious code in endless_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac77e66f0a62ef863e1c8f7d9dc635a884173d7b5d529ff962a21ab179e21515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...