268 matches found
MAL-2025-69215 Malicious code in lost-chocolate-condor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fea9bd5b0e8fbf10ba40cc01bcff75a52454e39f43393aa70a41eb623689aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-71267 Malicious code in uneven-chocolate-python (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc028dac9f7f90ca3ac492a5438af1b502f2c845366c50704aeb8c388a225c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-70089 Malicious code in psychiatric-chocolate-fox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ecdec1b9113c2c5edf8eb21625ebcd25e8e39e653eea1bc4f498f637713156c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in interior-chocolate-chickadee (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b63396d06e20fd598cecdef9224194216f88742e716712ec4ab2e9927606d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in vulnerable-chocolate-gazelle (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e84ee532325f0c092efdd83653ebea10218139b60d427bda2d6a835f22976f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52575
Malicious code in protective-chocolate-hyena npm...
Malicious code in energetic-chocolate-roadrunner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f416827b5d729f75586bd613e9b43f8a7ff1bf5bca348465ea951cb60913f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53146
Malicious code in mushy-chocolate-rooster npm...
EUVD-2025-54083
Malicious code in gothic-chocolate-bass npm...
EUVD-2025-53767
Malicious code in influential-chocolate-jellyfish npm...
EUVD-2025-54657
Malicious code in electronic-chocolate-mosquito npm...
EUVD-2025-55949
Malicious code in aggressive-chocolate-louse npm...
EUVD-2025-55876
Malicious code in amused-chocolate-galliform npm...
EUVD-2025-55877
Malicious code in amused-chocolate-armadillo npm...
EUVD-2025-52989
Malicious code in nursing-chocolate-harrier npm...
EUVD-2025-51287
Malicious code in urgent-chocolate-raccoon npm...
EUVD-2025-53420
Malicious code in loyal-chocolate-felidae npm...
EUVD-2025-55536
Malicious code in careful-chocolate-badger npm...
Malicious code in left-chocolate-canidae (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4266c53a070f62e5f17159b2eb674432fd85587c83a286f4c5420bbc2c6169a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...