EUVD-2025-117335

Malicious code in handicapped-lime-locust npm...

EUVD-2025-98074

Malicious code in imaginativelocustz3n npm...

EUVD-2025-98064

Malicious code in improvedlocustz3n npm...

EUVD-2025-102053

Malicious code in stupidlocustz3n npm...

EUVD-2025-101014

Malicious code in bizarrelocustz3n npm...

EUVD-2025-97985

Malicious code in inlandlocustz3n npm...

EUVD-2025-95474

Malicious code in realisticlocustz3n npm...

MAL-2025-116434 Malicious code in present_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cc58d7458651b1a39f2d3c4a0e3f6717cb3fc0edea7c6e6351c8d485fb5a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-89450

Malicious code in presentlocustz3n npm...

Malicious code in present_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cc58d7458651b1a39f2d3c4a0e3f6717cb3fc0edea7c6e6351c8d485fb5a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51fa16059ddfc88528b93cf036d689937b11906ccf6695a1a6e2871dba2c83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74389

Malicious code in outstandinglocustjade-3 npm...

Malicious code in outstanding_locust_jade-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6c56b4a8bd83f10a9e8ed58a094f080e301fdedbaf8ffb10ed26087a35e900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74580

Malicious code in hiddenlocustjade-78 npm...

Malicious code in oral_locust-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 006234baf22ec96ce0f362c0ba4647f110737a1a44f017b8610474d78486e4b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76542

Malicious code in institutionallocust-silentdev npm...

EUVD-2025-75425

Malicious code in tinylocust-silentdev npm...

EUVD-2025-77629

Malicious code in experiencedlocustmaroon-18 npm...

EUVD-2025-77647

Malicious code in distinguishedlocustfuchsia-69 npm...

EUVD-2025-77491

Malicious code in tragiclocustblush-20 npm...