EUVD-2025-94982

Malicious code in sleepyfishz3n npm...

EUVD-2025-105946

Malicious code in definitefishz3n npm...

Malicious code in definite_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d84db89d5be5c4a34c8dbcb0ba3c709bdb385745e75794f091e80ff213c9aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120138 Malicious code in fortunate_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46bb74c487b49973e21e39dc17044f9751120c3b6cc207356dd9184ef1d97ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119056 Malicious code in cautious_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d959a771597c47073f47af4e49ec23197d7545f6313759b17262f75724be27c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123993 Malicious code in vicious_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e954185b8976fa42f3c53c8b8365afcc0a4cd3459cc43beb61fdd373c03109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-92601

Malicious code in determinedfishz3n npm...

Malicious code in cold_fish-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34004d00d052cd1b2bea79a68671d1c658075b69c7cf57e901b10704f594c534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77296

Malicious code in comparativefish-silentdev npm...

Malicious code in combative_fish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5a3f0c15a19983abb299e373ae2c8c8fc15a180d0e9dbce6c66618b0baa706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary_fish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0afb5b08ec0a8d9f7a3f53277ec5b15900c3cbae2c8b2769f83931991230e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76844

Malicious code in fish-notthedevs npm...

EUVD-2025-77318

Malicious code in coldfish-toolteadev npm...

EUVD-2025-77306

Malicious code in combativefish-tool npm...

MAL-2025-100697 Malicious code in combative_fish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5a3f0c15a19983abb299e373ae2c8c8fc15a180d0e9dbce6c66618b0baa706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110629 Malicious code in voluntary_fish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0afb5b08ec0a8d9f7a3f53277ec5b15900c3cbae2c8b2769f83931991230e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77805

Malicious code in advancedfishz3n npm...

EUVD-2025-80160

Malicious code in uptightfish0xrequest npm...

EUVD-2025-79919

Malicious code in zerothfishreplicateautomation npm...

Malicious code in uptight_fish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e84c471d9d4b6afcd0edbed7bbe6564238199c5923732d507067458d39cf6a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...