EUVD-2025-51406

Malicious code in uncomfortable-gold-muskox npm...

EUVD-2025-52063

Malicious code in sheer-gold-shrew npm...

EUVD-2025-52581

Malicious code in proposed-gold-mockingbird npm...

Malicious code in watery-gold-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a4af1beabd270ef5340d5c233a5092fd84954a71bbadd4f54d87e1e571374b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lively-gold-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c515eddc135532b4f81f7a09a9000a71c33defed78c1fda423db1afa566b291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54809

Malicious code in dominant-gold-toad npm...

Malicious code in aggregate-gold-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2132e283d5543a65f9f6093851b4f7522ad852f3745d713de808d9fbf117d072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66739 Malicious code in allied-gold-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8853c5cba4d87649bdd688a55e4521666629cb028433af29f15d83ffd9ab578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55081

Malicious code in crude-gold-porcupine npm...

EUVD-2025-52094

Malicious code in shaggy-gold-bee npm...

EUVD-2025-54612

Malicious code in endless-gold-iguana npm...

EUVD-2025-52833

Malicious code in parental-gold-mammal npm...

Malicious code in grubby-gold-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b377cf3748801e881640a9754da1c3ac13853b41a17462c5d993d0bfe3a765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53438

Malicious code in loose-gold-camel npm...

EUVD-2025-54422

Malicious code in familiar-gold-limpet npm...

Malicious code in vulnerable-gold-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d5724174c472617ebce46ef640bc02925d0ee131cde1d06944e0e4ae727312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67188 Malicious code in chubby-gold-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838c66da69ef99a58498d05586bad8f14e700e1198178a722875144040f81d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67848 Malicious code in double-gold-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711bd25f8fc5bca780120047ef3f3a39a0a2f866b3cdf354cd0d8208bca499e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68751 Malicious code in husky-gold-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e0fe0cdca2e4293032f817fb2890cd7b7153e89890681c87cd38ad0e5b8083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71456 Malicious code in violent-gold-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b741aceb55abe3f736057c68ddd761889b362a72c4996d82e66f875fc864855c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...