EUVD-2025-102083

Malicious code in standardcranez3n npm...

EUVD-2025-96444

Malicious code in minorcranez3n npm...

EUVD-2025-105958

Malicious code in damagedcranez3n npm...

MAL-2025-119345 Malicious code in damaged_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12b475bee37ae4de2ae1eb124cf15d6d7a1b79c4c949437e393504c063286f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striking_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb53c195c65fad904345dc0bbe7167e6040eda738d7b08c3aa7e334541a530a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible_crane_aquamarine-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26bbaee920a59328aa2349da5206b107cbdfef48679df9e37b4c325528a9de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74090

Malicious code in weakcraneindigo-38 npm...

EUVD-2025-74455

Malicious code in minorcraneolive-12 npm...

EUVD-2025-74355

Malicious code in possiblecraneaquamarine-5 npm...

MAL-2025-112429 Malicious code in unknown_crane_turquoise-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c38720061c06a254d61b832504c32cf4286da27f126000bbf354efcb06865a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous_crane-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d925934a165f69e2d8bfc990dc54974d1ac6784fabf5ff8454d08df17cf5527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77288

Malicious code in complicatedcrane-smiletea npm...

EUVD-2025-77598

Malicious code in holycranemagenta-79 npm...

EUVD-2025-77527

Malicious code in ridiculouscranecopper-87 npm...

EUVD-2025-77460

Malicious code in yappiestcraneapricot-82 npm...

Malicious code in industrial_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70fb05572b7c0946a56859da6823702ed918b9f017c669bde10251defe870c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79027

Malicious code in industrialcranez3n npm...

EUVD-2025-78944

Malicious code in juniorcranez3n npm...

Malicious code in splendid_crane_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3d7caf0d4d7ee8397fc66ea44b3d4ee42f51511f4044494779a9ac118d0996 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_crane_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d88e51c8205eed09cca5592029fc23be292f1f167f8f6ee4193ddf8412366a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...