EUVD-2025-50925

Malicious code in yelping-violet-puma npm...

EUVD-2025-51318

Malicious code in unpleasant-copper-puma npm...

Malicious code in adjacent-plum-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f5f5340235047b019f969559dac485216fc7178a90dac427e82d72394cc644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52554

Malicious code in psychological-crimson-puma npm...

EUVD-2025-55184

Malicious code in controversial-orange-puma npm...

EUVD-2025-55994

Malicious code in adjacent-plum-puma npm...

Malicious code in yelping-violet-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0adaea808eeefa40d8a49244b4e3fd655bde5cf70dc9a02bd2e6a8f66546d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67465 Malicious code in controversial-orange-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ebdea4521e4382b775bb2b870bf75429aac7aa0555ba0dbfe8b4a36230a7541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69782 Malicious code in outrageous-magenta-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc250c8d0a931c232e1f2adf98f48d21735a2e148d71c31af4545f548bf621d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51245

Malicious code in variable-chocolate-puma npm...

Malicious code in rubber-tan-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08274620856864348e23d6716e3501a13040b0899523166b3dfe537f60e7dcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key-bronze-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 918362f96b1d4bd3f7de44ad53beb5f397524b25a8ca7603534e6e705049763f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in northern-peach-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f41a4a35ed4e60dd6fd4ffaf17697046f45cadc7eb7bebc4fbe47ea1c60cdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53606

Malicious code in key-bronze-puma npm...

EUVD-2025-53182

Malicious code in molecular-brown-puma npm...

EUVD-2025-54919

Malicious code in depressed-violet-puma npm...

Malicious code in narrow-plum-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd01d37760228465e452dd3e0682feeeaae077defba5998011a089c45b6c8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54451

Malicious code in extreme-blush-puma npm...

MAL-2025-68198 Malicious code in extreme-blush-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683098a728f81d88616d253833518076ca39d2482f84fff32d02f8f677e2eab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71404 Malicious code in variable-chocolate-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc5c87e44fa0ef20264749544b88c160bf3b4693fbf25a951b992f44755fce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...