70 matches found
Malicious code in famous-cyan-crayfish (npm)
Source: amazon-inspector 8617cf7b6feaa67afe8b5adab20ecb1e5365143509da1518394888b92e894b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in familiar-plum-crayfish (npm)
Source: amazon-inspector acaebb75ac457787adaab1d94786dd12a0dcb94ccd507aa52cd1fdaa33307626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in eventual-chocolate-crayfish (npm)
Source: amazon-inspector 6fee2685b0b59f7d4f115dc7f2cf5bebc7d19866b0953535ffa4915c0ad393c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in distinctive-aqua-crayfish (npm)
Source: amazon-inspector 21d98a6cf602be9d0b3fe467bca6cd969a9ce159190c5fc96ad9c7d11e79a587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in creative-aqua-crayfish (npm)
Source: amazon-inspector 6d5659c1f34205fa43ba5d17f75e523dc1f62ebc3ea2b16868c7f1d744870634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in additional-red-crayfish (npm)
Source: amazon-inspector 1cedec46ce37ac2717592c0826c48e2ecdbef71ad22fadb60b6008ced07774fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in absolute-amethyst-crayfish (npm)
Source: amazon-inspector 6ac286d55cc99627ea651ae79b269b3a03ca0900dfc6dcd9719b579f54405922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious Package
Overview famous-cyan-crayfish is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-97476
Malicious code in kindcrayfishz3n npm...
EUVD-2025-98072
Malicious code in immediatecrayfishz3n npm...
EUVD-2025-106635
Malicious code in amazingcrayfishz3n npm...
EUVD-2025-106503
Malicious code in awfulcrayfishz3n npm...
EUVD-2025-74739
Malicious code in disgustedcrayfishsalmon-19 npm...
EUVD-2025-75319
Malicious code in urbancrayfish-appteadev npm...
MAL-2025-110227 Malicious code in urban_crayfish-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a110f635b769e91fdbf785888354f84ae408eaf237f9391320d55c3236a4b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-107908 Malicious code in representative_crayfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6ae3b50514696f2d900def8e6fc417c7af472b32c0e352a15f9c391bfbf3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-78818
Malicious code in mechanicalcrayfishz3n npm...
EUVD-2025-81669
Malicious code in hostilecrayfishdumbs npm...
MAL-2025-108922 Malicious code in sore_crayfish_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227fcece3f0544230579606f6edfbdb713c5b291e6b5f3bd946b537b3c1f1e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...