EUVD-2025-77330

Malicious code in classictoucan-notthedev npm...

MAL-2025-101237 Malicious code in dear_dormouse-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec3a36db1654864382d5d5113f862b5e67f7b71de99b7e915b51633b61147bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77087

Malicious code in disappointedfrog-notthedev npm...

Malicious code in separate_stoat-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2d977bf35fa056c45a9218c7785fc4bd7cf5bb0a56dff5383da346e4adcb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75340

Malicious code in unnecessarymuskox-notthedev npm...

Malicious code in courageous_spider-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359563804603c1aa4a59806fa21a454c7d1a6753c3213382cf99e3bbad31e036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76637

Malicious code in hugeasp-notthedev npm...

Malicious code in back_marmot-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fabab5c48da7d24a0fabeb7be55363146312b89a1727c96794e609d990daae01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dear_dormouse-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec3a36db1654864382d5d5113f862b5e67f7b71de99b7e915b51633b61147bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected_lion-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534b6c70e814f88ebb124b15663b9abfd718aa33c770cfabc2ca4ec5263696fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zestful_porpoise-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 491e133094dde82ebbf17cf167136e4a0a15712d62f26523f0c63bed1c4e504a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75152

Malicious code in yelpingtahr-notthedev npm...

EUVD-2025-75139

Malicious code in youngestlandfowl-notthedev npm...

EUVD-2025-75115

Malicious code in zestfulporpoise-notthedev npm...

EUVD-2025-74965

Malicious code in backmarmot-notthedev npm...

EUVD-2025-76126

Malicious code in onlykangaroo-notthedev npm...

EUVD-2025-76060

Malicious code in partialxerinae-notthedev npm...

EUVD-2025-76038

Malicious code in persistentmole-notthedev npm...

EUVD-2025-76014

Malicious code in plaintoad-notthedev npm...

EUVD-2025-75961

Malicious code in primelizard-notthedev npm...