MAL-2025-138765 Malicious code in grubby-cyan-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd90f43efa9b93528bde9f8764b2c67fd75a8ecdfdbe3719c9480b3df9cbfec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117337

Malicious code in grubby-cyan-prawn npm...

Malicious code in grubby_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1305e0ff818d87e7ac01fddbb4ae31a0e7ccf80f76d26d290bf610b3e3f1e24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grubby_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6053dbe54a84f075933571a7428f6689417e8209cc07884198afd6fc54f31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grubby_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c27060f86b5bc17de23a48751fcc0f41c6f918a53521574684ee2bf0c6fc69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103416 Malicious code in grubby_felidae_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88c87a34e62e2f1e0459afdf04db4e7a87585da82c2e3bd1252d0738f78b4ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grubby_felidae_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88c87a34e62e2f1e0459afdf04db4e7a87585da82c2e3bd1252d0738f78b4ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81742

Malicious code in grubbycrocodilereplicateautomation npm...

EUVD-2025-63785

Malicious code in grubbyjaguarrequirement npm...

Malicious code in grubby_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e5049bf56ab5ee11894fd577d9711338cb99164154adc830d2fdfefb342ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94771 Malicious code in grubby_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d46519441f75517e108c2fdb4df438485ec99027335bb504e9b0e6fbaa0df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63783

Malicious code in grubbymeerkatz3n npm...

Malicious code in grubby_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a71268bc53b44b94fadf8004a5f438f10c3a7f26416be4a58312e30e944ea056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86103 Malicious code in grubby_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53668cd9dd5cc34bf5ffb9873a616fd7d54a82e74f52f7e442995a776d2467a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grubby-moccasin-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9cf33eee48287783a1a38f7f919e42b1b2b3d3a792fe1fe2b59a3405f73047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54038

Malicious code in grubby-bronze-marten npm...

Malicious code in grubby-silver-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d0574725fe4a8eb858a2497850d49ac98154fbf42fb40523e9454ed99fe3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68610 Malicious code in grubby-amber-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0447717d7e99459ec8351cf4f366fffc1214068cd9e04b89b63766564d1006c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54034

Malicious code in grubby-silver-squirrel npm...

EUVD-2025-54037

Malicious code in grubby-gold-bee npm...