EUVD-2025-53422

Malicious code in low-green-dragonfly npm...

Malicious code in compact-green-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9286c69cf114a3585fd24fefadd4408fdcae89285d495751dff1e18936bc40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55310

Malicious code in compact-green-shrimp npm...

EUVD-2025-53960

Malicious code in holy-green-stork npm...

EUVD-2025-50860

Malicious code in zonal-green-puffin npm...

EUVD-2025-52477

Malicious code in random-green-buzzard npm...

EUVD-2025-52611

Malicious code in profitable-green-panther npm...

EUVD-2025-53238

Malicious code in minor-green-rat npm...

Malicious code in central-green-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e442f783213bf2bcb0f1b472d622924bbfab171d90bba941cae6b4d61a66b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passing-green-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32323f693e5c1519bbb8ce90485331b0b9312988582fec4074bfd85da592108a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52818

Malicious code in passing-green-llama npm...

Malicious code in jealous-green-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63ae02c445bc7cf89c12998264d45dfbc36e4e2405e53f5ac1801e5d8658990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67047 Malicious code in brave-green-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b58ad63acab6c201c425758f386bcdf1f5f7fd96a2f0da7496174552962352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67291 Malicious code in colossal-green-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 987f041ff8a13fbc7a71c9fa79ea531ba748b9de99e30b1bfa9176384d8f3d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67609 Malicious code in daily-green-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4743d24a01477230ba6fcc7e5883b11236d12335f77de3fe807d66f886a7b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67463 Malicious code in controlled-green-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85f3075d4b1b291d4dc8e40aaa85da5687cff4a209b910da38f9630cb5b19bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71215 Malicious code in ultimate-green-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066c285b3fcb8bdb22ccf2a7eb06ac076a77684dfdc7b86edba20bfe767eb36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71794 Malicious code in zoophagous-green-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3c8df52a12fbe19bf2b67d740112de857842456966b835e8db89090b1911e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53112

Malicious code in nasty-green-monkey npm...

Malicious code in greasy-green-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd80e6332335c5ddab3126b7717e33fbe15561a56d546632acfb557c229eafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...