Malicious code in obliged-gray-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04fe894ddc20327b2fb3e7036c84fe23114a4183385c745608ac91feb4a2778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious-gray-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8db8ed4892456becbc29f75ca434b652639869fa93ca9660a234ff93e9284f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117467

Malicious code in cooing-gray-eagle npm...

MAL-2025-138635 Malicious code in cooing-gray-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee4e04041645ccefea1a7b4557022e36c1affbe69091836280e14d0184b2b7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111702 Malicious code in brainy_octopus_gray-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420f7e1e19a0bb59666af86b1337b6aa3f58b953153c9ad7ea81b3dd908c8ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparative_koala_gray-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f39211ebe47510c492b782b320da6dc12ed878ab81ee702328088f564a9812e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74850

Malicious code in brainyoctopusgray-33 npm...

EUVD-2025-74805

Malicious code in comprehensiveplanariangray-90 npm...

EUVD-2025-74465

Malicious code in medievalthrushgray-55 npm...

EUVD-2025-74326

Malicious code in querulouscanidaegray-17 npm...

EUVD-2025-74314

Malicious code in realisticcrocodilegray-66 npm...

EUVD-2025-74374

Malicious code in patientspoonbillgray-49 npm...

MAL-2025-112087 Malicious code in medieval_thrush_gray-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3db0de125ef5f266b7a7368020f311188cb9686108b487e21ebc703fa45abb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112226 Malicious code in querulous_canidae_gray-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e61282c538d1eb6fd3b95cb698679e5e659d3e744e9e52fe8fdcc5622237b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77533

Malicious code in quietmarlingray-99 npm...

EUVD-2025-77459

Malicious code in youngestleopardgray-91 npm...

Malicious code in monkey_gray-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ba6532f29a802eadfb872b3b7785b530148d9395180724a2eaf1fa4adaaf46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97632 Malicious code in camel_gray-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d27a68d53b333cd711dd47c1e15978576ca7c80ec02098bc77e138f7f48ebda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65372

Malicious code in agricultural-gray-aardvark npm...

Malicious code in agricultural-gray-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43568a3c00fd69627156b0df2eb77d2b0206464c05bcd4e21eb2396b4c40d03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...