EUVD-2025-54226

Malicious code in frequent-brown-elk npm...

EUVD-2025-52438

Malicious code in ready-azure-elk npm...

EUVD-2025-53857

Malicious code in immense-brown-elk npm...

EUVD-2025-53925

Malicious code in hot-scarlet-elk npm...

EUVD-2025-52175

Malicious code in scary-chocolate-elk npm...

EUVD-2025-51352

Malicious code in uninterested-aquamarine-elk npm...

EUVD-2025-54380

Malicious code in fat-purple-elk npm...

Malicious code in voluntary-silver-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acd66c039dcd39f5e5249a13a927d979044e62ee74e101abde084fe504169f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive-cyan-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30b2d0ad5055335cccbae866b0857106de84e7d0cc0b22ca4f9581b47274423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary-chocolate-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a0077188d7dd2efb9e58974b5089176217481a1abb05baffa279e5dde89ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70474 Malicious code in scary-chocolate-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a0077188d7dd2efb9e58974b5089176217481a1abb05baffa279e5dde89ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69709 Malicious code in okay-tan-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df30564d7023ad1f38e559149ced39645112dd22b3a8cf570cdfe0053137571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51225

Malicious code in vast-scarlet-elk npm...

EUVD-2025-52940

Malicious code in okay-tan-elk npm...

EUVD-2025-53223

Malicious code in misleading-peach-elk npm...

EUVD-2025-51551

Malicious code in theoretical-yellow-elk npm...

Malicious code in ready-azure-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38073b995223c6847db5685fc14b581ce01034d621779d94e24bb217bd621fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52567

Malicious code in proud-gold-elk npm...

EUVD-2025-55223

Malicious code in conservative-salmon-elk npm...

MAL-2025-67426 Malicious code in conservative-salmon-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1a93e5c0fe7d0e97ceb7e8c7fe06fc598d69ae43f55473f6670543716a9451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...