MAL-2025-91757 Malicious code in vertical_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59053957a146caa7204d84c31797beb7e2dae2b84de10cbe2ee4fb645e570f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-66529

Malicious code in spectaculargoosez3n npm...

EUVD-2025-85585

Malicious code in implicitgoosez3n npm...

MAL-2025-82847 Malicious code in accused_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c87b94e82fe355a3d93a3adfa1f31087f747fc5744d93f5680eb16c1988b3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53993

Malicious code in helpful-apricot-goose npm...

EUVD-2025-52118

Malicious code in senior-lime-goose npm...

EUVD-2025-51317

Malicious code in unpleasant-maroon-goose npm...

Malicious code in icy-black-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52506c0ffeb3b00f0a77c12a8ae7e3553a0a580af67cc9a0e2df1580f1b7b1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational-emerald-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bd787f810b72f5d61d02203b90aa10ec3f6ff1dc6f19f0a592f73b808ae4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready-black-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd39e7f5f789a06c216bfd7dafa2b7223ab71218d62b05c0502f7a6072d9878e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51841

Malicious code in squealing-crimson-goose npm...

EUVD-2025-51760

Malicious code in striped-scarlet-goose npm...

EUVD-2025-53835

Malicious code in impressive-red-goose npm...

EUVD-2025-54709

Malicious code in educational-emerald-goose npm...

EUVD-2025-55539

Malicious code in capitalist-aqua-goose npm...

Malicious code in yearning-tan-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939895f525edebadeb7a05e19bf7ec496ae88a254fca3775e00fb49ca8f4beaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52437

Malicious code in ready-black-goose npm...

MAL-2025-67940 Malicious code in educational-emerald-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bd787f810b72f5d61d02203b90aa10ec3f6ff1dc6f19f0a592f73b808ae4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53892

Malicious code in icy-black-goose npm...

MAL-2025-71714 Malicious code in yearning-tan-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939895f525edebadeb7a05e19bf7ec496ae88a254fca3775e00fb49ca8f4beaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...