Malicious code in dreadful-aqua-stingray (npm)

Source: amazon-inspector 02448f120ee0ca9d388a083c5f36a47502dde97577bcccdb293dda50f96944cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dreadful-teal-gazelle (npm)

Source: amazon-inspector 98c93e1aa6aecdac7f678ee5057fe05ab4e246c45895afbc133d9abcca69bb06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dreadful-olive-cougar (npm)

Source: amazon-inspector d9478b181b0a9b1ec327284278a64eda92e8b62d1f067c1dc8718d654aa004c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dreadful-yellow-dragon (npm)

Source: amazon-inspector da962d3c8f84ba3f18426560c437a9af13176d4eaa7cfba9e7daf71d35c648f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dreadful_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b5f255a5ebab4fc767c2967a49e1abf79774842f03982f354623ef6b9d6f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119599 Malicious code in dreadful_wildfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e524a7daf3f25a68536cba27f79b0bc1d9ca61766157e435004c35d49f6c118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dreadful_lion-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7baaa854c638830b50ab3301da6f8300f895d3e2a9326b5fcbeadb1c0175961f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77050

Malicious code in dreadfulmockingbird-appteadev npm...

EUVD-2025-77049

Malicious code in dreadfulsnake-smiletea npm...

EUVD-2025-79379

Malicious code in dreadfulswordfishz3n npm...

Malicious code in dreadful_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a9f36114c89fd3ab48fcc031831ef16941d4eddcee5eddb401cf43315c6e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82151

Malicious code in dreadfulratdumbs npm...

MAL-2025-101766 Malicious code in dreadful_cat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 832dc5b97cc3ca78b3182094a3278978ffcf5845dbe9d23b21bfd54233ce9d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82153

Malicious code in dreadfulcat0xrequest npm...

EUVD-2025-64441

Malicious code in dreadfulcamelz3n npm...

EUVD-2025-54785

Malicious code in dreadful-aqua-stingray npm...

EUVD-2025-54782

Malicious code in dreadful-yellow-dragon npm...

EUVD-2025-54784

Malicious code in dreadful-olive-cougar npm...

EUVD-2025-54783

Malicious code in dreadful-teal-gazelle npm...

MAL-2025-67864 Malicious code in dreadful-aqua-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02448f120ee0ca9d388a083c5f36a47502dde97577bcccdb293dda50f96944cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...