EUVD-2025-88883

Malicious code in secretgeckoz3n npm...

Malicious code in precious_gecko-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc3c7f1d5542f6ad5f19beeabf22343fa0f1eb9feabc70097a159b8be8354d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad_gecko-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c36f0b4469f454340ce2993d0a0ab63db877d5063112f63f8b99ac18f12757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76596

Malicious code in impossiblegecko-smiletea npm...

EUVD-2025-78036

Malicious code in unexpectedgeckoz3n npm...

EUVD-2025-80903

Malicious code in presidentialgecko0xrequest npm...

EUVD-2025-80260

Malicious code in traditionalgecko0xrequest npm...

MAL-2025-98794 Malicious code in local_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0820db521179023701906ee185ca2a3e190acb673b9fbff7c7dab65e91984c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72449

Malicious code in geckoplum-78 npm...

Malicious code in gecko_plum-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316cbb7824adab770fdb456c9baee5255a9fb464e488f46d193e340b2e492054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72668

Malicious code in briefcoralgecko-56-tisubasah npm...

MAL-2025-97841 Malicious code in gecko_plum-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316cbb7824adab770fdb456c9baee5255a9fb464e488f46d193e340b2e492054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64857

Malicious code in conceptualgeckorequirement npm...

EUVD-2025-63676

Malicious code in humangeckorequirement npm...

EUVD-2025-72800

Malicious code in yearninggeckoz3n npm...

EUVD-2025-63158

Malicious code in marriedgeckoz3n npm...

EUVD-2025-63291

Malicious code in linguisticgeckoz3n npm...

EUVD-2025-64727

Malicious code in correspondinggeckoz3n npm...

EUVD-2025-62088

Malicious code in visitinggeckoz3n npm...

MAL-2025-84820 Malicious code in early_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05256447f0c3c451d1a4fe31897c8d83d688ae44e93f36a4f65633224652823d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...