Malicious code in dreadful_lion-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7baaa854c638830b50ab3301da6f8300f895d3e2a9326b5fcbeadb1c0175961f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75337

Malicious code in unpleasantcrane-biggestdev npm...

EUVD-2025-76442

Malicious code in leftskink-biggestdev npm...

EUVD-2025-75843

Malicious code in regulargecko-biggestdev npm...

EUVD-2025-77302

Malicious code in communistcondor-biggestdev npm...

EUVD-2025-77147

Malicious code in decisivehare-biggestdev npm...

EUVD-2025-77324

Malicious code in clinicalaardwolf-biggestdev npm...

EUVD-2025-75936

Malicious code in protestanthawk-biggestdev npm...

Malicious code in yappy_salmon-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60098d8ced04be8f9adbab6ff4816ff61e49fd65d787fbb67a50f800fbea911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75615

Malicious code in slimyeagle-biggestdev npm...

EUVD-2025-76903

Malicious code in explicitmarlin-biggestdev npm...

Malicious code in polite_crab-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd7c7586078215e15eee03224d441fd0ace71d42acc30648e756bbe1fcacbb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75161

Malicious code in yearlingsquirrel-biggestdev npm...

EUVD-2025-75522

Malicious code in stupidparrot-biggestdev npm...

EUVD-2025-77131

Malicious code in deliciousaardwolf-biggestdev npm...

EUVD-2025-74986

Malicious code in attractivelark-biggestdev npm...

EUVD-2025-77136

Malicious code in deliberatesheep-biggestdev npm...

Malicious code in alone_wildcat-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a56af3102e021c3186d40b81146df6dba44e0238ba239d4de840ef6da74b00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111246 Malicious code in yappy_salmon-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60098d8ced04be8f9adbab6ff4816ff61e49fd65d787fbb67a50f800fbea911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100922 Malicious code in content_narwhal-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674adf726050640ec82969dbf7c708f372888e35778482f7258c2ccbbc86fb20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...