Malicious code in obvious-chocolate-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468c285835ce5c45091a68e5cec542b5d18b1c70fd94d68a08b2a8f7e8b06442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52597

Malicious code in prominent-chocolate-koala npm...

EUVD-2025-51446

Malicious code in typical-chocolate-fox npm...

EUVD-2025-52850

Malicious code in overwhelming-chocolate-hornet npm...

EUVD-2025-51245

Malicious code in variable-chocolate-puma npm...

Malicious code in scary-chocolate-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a0077188d7dd2efb9e58974b5089176217481a1abb05baffa279e5dde89ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret-chocolate-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d7bf5dcebb64a8d8783f6a1867987ed01f14577ada5e5c129f3c8bfd3e25fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54874

Malicious code in disabled-chocolate-firefly npm...

Malicious code in variable-chocolate-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7b0fd9e3f50e752b35cfce7a47ce377dc128160dffb348b2c38d46abee17c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53542

Malicious code in legitimate-chocolate-hummingbird npm...

EUVD-2025-52047

Malicious code in short-chocolate-marlin npm...

EUVD-2025-53145

Malicious code in mushy-chocolate-tortoise npm...

EUVD-2025-51738

Malicious code in subsequent-chocolate-lizard npm...

EUVD-2025-53366

Malicious code in managerial-chocolate-damselfly npm...

Malicious code in rich-chocolate-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d72c0b5c208569b8f9bc3f3077896bc67b00c12e5abe0f2007f67bd99cb3861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69215 Malicious code in lost-chocolate-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fea9bd5b0e8fbf10ba40cc01bcff75a52454e39f43393aa70a41eb623689aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71404 Malicious code in variable-chocolate-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc5c87e44fa0ef20264749544b88c160bf3b4693fbf25a951b992f44755fce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68727 Malicious code in huge-chocolate-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b073ab5e033538e5bde9c2e9e98d860050fde07855eb1cd304efe83812b181fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69733 Malicious code in optimistic-chocolate-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff6757308bfc4f64a421cbad9dd00a862cf2c1cd4ca29734edb33e8b5a74e5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68592 Malicious code in grim-chocolate-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a4433a4c066605cc75fcb4aa888e79581552d2541ca57ef035348664f8c7ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...