EUVD-2025-102114

Malicious code in specialguanz3n npm...

EUVD-2025-102276

Malicious code in silentswordfishz3n npm...

Malicious code in marine_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020456a613e1c8f696871a0c2982aa615544a715234c67b721536c6c894867a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-95488

Malicious code in racialgopherz3n npm...

Malicious code in diplomatic_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db401c859428267b4db7fd66d1c1bc08a93731153e6679486bc0dfaea5c37cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in real_turkey_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f69d19d93fad573e679d1b63de448ec1335525e9f1ab1afd0f5a3b1cc79a119b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-71507

Malicious code in leadingherringz3n npm...

Malicious code in elaborate_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3bae92301df2a81ea0f6b380fbae002f6a5cc4e859239a76151bdec3a3795a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93237 Malicious code in anonymous_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d960e039d278259b4412cfaa7c1ca16a5b23383fb568cf3a2f9fd3b4afa81e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-62894

Malicious code in normalflyingfishz3n npm...

MAL-2025-93326 Malicious code in aware_constrictor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a554b1d397bf07afdd30be836e78bb8e7d6dd6eb3ab524ee2ba3d766cb4dbd48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89951 Malicious code in resulting_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fbaf91276a175e49c3a681b72af542f4f8c47409e4698abbb5853eb80281940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50658

Malicious code in beneficialbadgerz3n npm...

EUVD-2025-49512

Malicious code in regionalmeerkatz3n npm...

EUVD-2025-49204

Malicious code in thirstydovez3n npm...

Malicious code in paradise_gi12m_9d0ij_ember (npm)

The package paradisegi12m9d0ijember was found to contain malicious code...

Malicious code in blade_background (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8e0ab7bc65f47415c49500ce45a5167fd26a9eb02322a1b7d4d7d61c632c960 Any computer that has this package installed or running should be considered...

Malicious code in yelp_map_engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc0e065f97aa48a1c14b34413686b75a0bd2f8c7ff87df9a5d5ece8040e26348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bankin_thechnical (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47c5b9ca3265186bc02f0413021b60dd2ca80f76b0a2cb0fccd974a6e55c8e2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...