MAL-2025-111664 Malicious code in anxious_wolf_tomato-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4fc431a1cfcf796f399b911b31c8bef8e152b2e9cbe4f0f0110087603c2a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74835

Malicious code in charminggiraffetomato-54 npm...

EUVD-2025-74841

Malicious code in casualanttomato-56 npm...

EUVD-2025-74268

Malicious code in semanticshrewtomato-28 npm...

Malicious code in identical_canidae_tomato-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12c4b1136140bc38c94f806b31a05c0835dde6b204b22ca4bbc65b72ce06669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63416

Malicious code in jolly-tomato-gull npm...

EUVD-2025-51552

Malicious code in theoretical-tomato-booby npm...

EUVD-2025-51519

Malicious code in thoughtless-tomato-roundworm npm...

EUVD-2025-51396

Malicious code in underground-tomato-giraffe npm...

EUVD-2025-51182

Malicious code in visiting-tomato-cod npm...

EUVD-2025-51117

Malicious code in wee-tomato-marsupial npm...

EUVD-2025-51058

Malicious code in wilful-tomato-guineafowl npm...

EUVD-2025-51024

Malicious code in wooden-tomato-catfish npm...

EUVD-2025-51014

Malicious code in worried-tomato-firefly npm...

EUVD-2025-50984

Malicious code in xenacious-tomato-gull npm...

Malicious code in amateur-tomato-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a2a5e2b466e43b405a2383f54273d2571d6b2ee7e6881aa5b83558afab0fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annoyed-tomato-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b72e1bcb68198f717ccb26766938884e6242a33ff6c533b11a8d574d62bc00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy-tomato-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447519bb24a15ea0fefd750380d1c0950f555489134aa2e73ebae574bad4b381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convinced-tomato-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff2b60278e03279f791966c9bff1be323be12941524a4c377d0e9a16094b1ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in current-tomato-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d9e506cef16bae43fb33a25ba234d7eb3565bd863fe16f392284a781a8ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...