EUVD-2025-54881

Malicious code in dirty-amber-hookworm npm...

EUVD-2025-56013

Malicious code in additional-amber-toucan npm...

Malicious code in intact-amber-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0665b15f9b06df8b1a5bf72eb18d44df10b157a976c3f6e8151c4b0ce71295a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51173

Malicious code in vitreous-amber-peafowl npm...

EUVD-2025-52169

Malicious code in scientific-amber-bird npm...

EUVD-2025-53726

Malicious code in intact-amber-jellyfish npm...

EUVD-2025-55634

Malicious code in boiling-amber-spider npm...

Malicious code in uniform-amber-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7344771a2affd254f34742a2540a961b85c828d8fcf31682b76987917e408688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53638

Malicious code in joint-amber-bovid npm...

EUVD-2025-51132

Malicious code in watery-amber-louse npm...

EUVD-2025-52731

Malicious code in polite-amber-primate npm...

EUVD-2025-54614

Malicious code in endless-amber-mockingbird npm...

Malicious code in boiling-amber-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a776f8453a17b1080846676da948b3f62849a0618cb4eec19afa94c99aeaf91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liquid-amber-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b099d18035ca7fad7bf1e455b43b1003b9492074903171c2b9f9f6419d93fc94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66857 Malicious code in asleep-amber-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b79e193916b8a1ac3817a195723657a542783b437d3400f84c9e343e5fe050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70901 Malicious code in subjective-amber-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba082f3db73056c1df3726e1625caf2e364664a36bfc2037e15bd81f29dbc6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69705 Malicious code in okay-amber-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d618a1e8b5b0b5a380fedc12f29c5a6a1a35e4196a2c4c736ec06a07c2a976b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70199 Malicious code in rational-amber-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d3691e2ff4a568705ca77c19e16231d44823aa60392819802b36b8f3d09e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68035 Malicious code in endless-amber-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7ed5737d0a27de22db1f7da9f3825185f42c51646a799a6a41ca6b78eb44c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70164 Malicious code in rainy-amber-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845cc9ff6508b9f4198ae238c7006216228744f939009f9806a3bd099fb0c7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...