MAL-2025-100805 Malicious code in conceptual_llama-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc0c23bbd3f0626ef3211a6eccf13f762805df8542fac183174d8f383abc38e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103101 Malicious code in genuine_llama-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efeccb3a3a049dd91e5b548558535ebab1dc2dd29793b4bc3c24e8367fee6a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77836

Malicious code in zonalllamaz3n npm...

EUVD-2025-77990

Malicious code in variablellamaz3n npm...

EUVD-2025-80544

Malicious code in slightllama0xrequest npm...

Malicious code in slight_llama_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee3eb2362eaed8a7850a4ee4d9b24cfe6bf846cfeb7c1571c9f16fd9f28a7422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in llama_moccasin-47-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158895fdc4fcc4d31685b07679b0cf780a93c504e96ea97924923679a202770d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72213

Malicious code in llamamoccasin-47-tisubasah npm...

EUVD-2025-63108

Malicious code in mentalllamarequirement npm...

EUVD-2025-65180

Malicious code in bewilderedllamarequirement npm...

EUVD-2025-73162

Malicious code in unfairllamaz3n npm...

EUVD-2025-63982

Malicious code in formalllamarequirement npm...

EUVD-2025-64862

Malicious code in comprehensivellamarequirement npm...

MAL-2025-95446 Malicious code in mental_llama_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eded67eb1499d82de4528421f75a12c3c7b89b4e36efb84fc22e87dfe85669e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97128 Malicious code in unfair_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e959af7f8d16a9fe66a3cb6de459b5323c822430d5e9f8c192793de9c0c60d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53187

Malicious code in modest-azure-llama npm...

EUVD-2025-53453

Malicious code in living-maroon-llama npm...

EUVD-2025-51627

Malicious code in symbolic-lime-llama npm...

EUVD-2025-54638

Malicious code in embarrassed-yellow-llama npm...

Malicious code in drunk-aquamarine-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a1f7004ce24ef63fc53b578b2dde94068b56c086d99403257e1eb93a09bcb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...