MAL-2025-88773 Malicious code in neutral_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df325d8e13ee214b1bee0335c9b78933cca7894625b6daf3b989072b234f39e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55596

Malicious code in breakable-scarlet-rat npm...

EUVD-2025-50902

Malicious code in youthful-silver-rat npm...

EUVD-2025-53238

Malicious code in minor-green-rat npm...

EUVD-2025-53641

Malicious code in jittery-magenta-rat npm...

EUVD-2025-51555

Malicious code in theoretical-harlequin-rat npm...

Malicious code in complex-bronze-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f387e3115bc0703a99c80a6e8560c0a352d073a7ff02ade2b32c48d8bdafe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52920

Malicious code in opposite-magenta-rat npm...

Malicious code in excited-silver-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfd4f4932f1b7aaae0105a72e6d70c75928328a2bdd81eb64ab4a23169519b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69411 Malicious code in minor-green-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 983200543d474433cab34d96babec4b386aab468cbb7f7dcc71022b577874fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68150 Malicious code in excited-silver-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfd4f4932f1b7aaae0105a72e6d70c75928328a2bdd81eb64ab4a23169519b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire-turquoise-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abeee65aac3ebe3245a70a67839978a130c86bf38c7cfc132988237edc2be49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in active-jade-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599a58142aff6aef2b7503d2b238da2f3952f0c4019fb4eda35580b8d37d5891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55101

Malicious code in critical-tan-rat npm...

Malicious code in opposite-magenta-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d06238d448a72a1e239cb8ee789c5045a1eea31e51094f6611cc0b7561c17705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55279

Malicious code in complex-bronze-rat npm...

EUVD-2025-51104

Malicious code in welcome-scarlet-rat npm...

MAL-2025-71094 Malicious code in theoretical-harlequin-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7267d56c1681ee0cfe7b6a91f86775ea9dc533741e850810bbf1dd6125c3631a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69729 Malicious code in opposite-magenta-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d06238d448a72a1e239cb8ee789c5045a1eea31e51094f6611cc0b7561c17705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67053 Malicious code in breakable-scarlet-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d2e58b1de38ad7adf4f2acbbad20c827a8d095ad433e9a815ad295acf05edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...