MAL-2025-90906 Malicious code in tame_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416685a6e8c0fdd30f1c894c59d34522b24bbf4eceeb501d1b4c7cd6a1b1baaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51040

Malicious code in witty-chocolate-gopher npm...

EUVD-2025-52183

Malicious code in satisfied-green-gopher npm...

EUVD-2025-54928

Malicious code in dependent-tomato-gopher npm...

EUVD-2025-55772

Malicious code in automatic-crimson-gopher npm...

EUVD-2025-53708

Malicious code in intense-purple-gopher npm...

EUVD-2025-54442

Malicious code in exuberant-lavender-gopher npm...

EUVD-2025-53515

Malicious code in liable-purple-gopher npm...

EUVD-2025-54676

Malicious code in eldest-amber-gopher npm...

EUVD-2025-55371

Malicious code in colonial-chocolate-gopher npm...

Malicious code in mobile-tomato-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff78b3de8a92f8ea5a05ce91db4b9cf64b73603a239011682f515685736c20b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67721 Malicious code in dependent-tomato-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd3b5ebeeb8c62f78a0ddc7b4e5a3a328c3d188ec0b1c35af5fd387e7764eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52454

Malicious code in raspy-orange-gopher npm...

EUVD-2025-54221

Malicious code in frequent-turquoise-gopher npm...

EUVD-2025-54165

Malicious code in fuzzy-amaranth-gopher npm...

EUVD-2025-51244

Malicious code in variable-rose-gopher npm...

Malicious code in chronic-blush-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcb29ac709c4eeea59f102303939c0e6aff5db9e6e00565d15b01d2dbec048c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55467

Malicious code in chronic-blush-gopher npm...

EUVD-2025-50998

Malicious code in written-orange-gopher npm...

Malicious code in alive-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e7d433927058e89b625011173b651f49b00420c6ab3784c5548eac5ba84b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...