EUVD-2025-52566

Malicious code in provincial-black-quokka npm...

Malicious code in distant-black-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3687641bfde87687e580cc2375259f9d9673ef0215e6057ba65fe3e5bb0c8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55328

Malicious code in commercial-black-sheep npm...

EUVD-2025-54319

Malicious code in fine-black-silkworm npm...

Malicious code in identical-black-squid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711e0745af2f5b530ca389dc23050b86ea7da8362b9af48871ba02fc3ca194b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51622

Malicious code in systematic-black-chickadee npm...

EUVD-2025-51347

Malicious code in unique-black-echidna npm...

EUVD-2025-54866

Malicious code in disciplinary-black-beetle npm...

Malicious code in disciplinary-black-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46ab5155ff98ddff47684788ea60599d59a7d6ceb38940452371b8ffbdbbe4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54376

Malicious code in fatal-black-cod npm...

Malicious code in fuzzy-black-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75456b55f2c232b9481edf00c0d94b87d9d128501ee27065cd3c35a2b0033521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wide-black-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55392b535862c6ed90e2e9d1c91c276c997a843b931e069d2989c0c5c39573e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51518

Malicious code in thundering-black-mockingbird npm...

EUVD-2025-51629

Malicious code in symbolic-black-swan npm...

Malicious code in meaningful-black-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2bd3af7080a5ef8b874fdacf6fdf27d8e6459fa440646d20b91b65216cffaf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53381

Malicious code in major-black-lark npm...

EUVD-2025-50907

Malicious code in youthful-black-crane npm...

MAL-2025-71131 Malicious code in thundering-black-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e22cdc1d28042fdc8b8d4e8414bb09b00f40b59d554a03ed8cdf46ae4f397f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69279 Malicious code in mammoth-black-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ced992abcfcc4fdc1051e69c55193333e19e613d56906644478124a80b30c41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69607 Malicious code in neutral-black-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ca77a935fbdb3767b79809f0b90c3813cb88c603b516649afeb7e9a430a840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...