MAL-2025-119979 Malicious code in famous_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe4886a691e02d721063b4f74020d360bdb8acdfd3dc10a34e44a9267ae557d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-92723

Malicious code in closewhalez3n npm...

EUVD-2025-74910

Malicious code in activewhalechocolate-31 npm...

EUVD-2025-75434

Malicious code in thoughtlesswhale-gooddev npm...

EUVD-2025-76295

Malicious code in meltedwhale-appteadev npm...

EUVD-2025-76633

Malicious code in humanwhale-apptea npm...

EUVD-2025-76489

Malicious code in jitterywhale-silentdev npm...

MAL-2025-104559 Malicious code in jittery_whale-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c505f0bfe391e83140d9b5fcd9aabaafb7920220472365d4daa54ad08bc5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105791 Malicious code in melted_whale-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e7619dc95a235ed2af21ec8ff0badcab6b55f9f5030e9c8b1dc8f6b1dcb0b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77132

Malicious code in delicatewhale-gooddev npm...

Malicious code in autonomous_whale_silver-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f34fab54fc34a156613197b1cabe9637780df6fa3a09d2a239a75c22b05f787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noisy_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf39ab42e48c3658e4dd87926f83ba1cdfffa82b9444e0c2b038a4a8770cda0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78672

Malicious code in optimisticwhalez3n npm...

EUVD-2025-78463

Malicious code in relatedwhalez3n npm...

EUVD-2025-78208

Malicious code in stingywhalez3n npm...

EUVD-2025-79049

Malicious code in impressivewhalez3n npm...

EUVD-2025-77928

Malicious code in widespreadwhalez3n npm...

EUVD-2025-78707

Malicious code in noisywhalez3n npm...

MAL-2025-107839 Malicious code in related_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92c3a2571b884007ff2c201a7997632c42e55d1c8d141b4925da80646bd2923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooing_whale_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd679e2cda65c0c8251879455670df293e2f92e31530900a1b081ea7e425ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...