EUVD-2025-52604

Malicious code in profound-indigo-mink npm...

EUVD-2025-53911

Malicious code in hungry-indigo-moose npm...

Malicious code in biological-indigo-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6e1e4274dd6adfa1d5189e5cef993caeeef0a8884a19c11b2d8d14ba8b24a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry-indigo-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70aac3abb6e9ed3b4676e3cb8caf45a1acd3b87be789f3620e94fc1c9c782d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52673

Malicious code in pregnant-indigo-leopard npm...

EUVD-2025-55270

Malicious code in comprehensive-indigo-egret npm...

EUVD-2025-54600

Malicious code in entire-indigo-asp npm...

EUVD-2025-55954

Malicious code in afraid-indigo-goldfish npm...

Malicious code in yielding-indigo-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e2a521bb060ff9171cfad4e9d1ebf7728e8276d334b7da57ee5299b2b7a438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasteful-indigo-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78265be9b8cf6135279e2b3b13aa2e89603a3c020e4e9f70568e928d4348d177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shivering-indigo-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 407562a34aa3368b056bbad81573dcd1d6e934681b4e4a5faefbed3384044051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51586

Malicious code in technological-indigo-crocodile npm...

MAL-2025-68894 Malicious code in initial-indigo-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902c8c8f4be2199ec74693de9f9bdc8f79db3770eb30194728df45934ea0bc79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56008

Malicious code in additional-indigo-orangutan npm...

Malicious code in possible-indigo-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e42f7bb2da584bb623dcfe3deb3d494474369a7511cc67c356e3647c5c6c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colossal-indigo-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8052b473721331e357824eeb7c41e0259df26525aa5d99997f597acb2f0221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55851

Malicious code in anxious-indigo-vulture npm...

Malicious code in anxious-indigo-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb72d977790c508ef97e8fb512e4661f385874d01ffa0c88039113fcc763522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71726 Malicious code in yielding-indigo-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e2a521bb060ff9171cfad4e9d1ebf7728e8276d334b7da57ee5299b2b7a438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70406 Malicious code in roasted-indigo-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34307d7160b686e7ecb3e8d46496c8a77d5a210621a956e0a4b27659776aa012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...