EUVD-2025-102997

Malicious code in presidentialpuffinz3n npm...

EUVD-2025-100226

Malicious code in willingpuffinz3n npm...

EUVD-2025-95132

Malicious code in selfishpuffinz3n npm...

EUVD-2025-94874

Malicious code in survivingpuffinz3n npm...

EUVD-2025-105091

Malicious code in gastricpuffinz3n npm...

EUVD-2025-92237

Malicious code in enthusiasticpuffinz3n npm...

EUVD-2025-91712

Malicious code in gentlepuffinz3n npm...

Malicious code in courageous_puffin_bronze-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7dfc42a9a767037268e5f534e5e2afec90f86281a60df7987b329940185db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74849

Malicious code in breakablepuffinteal-37 npm...

EUVD-2025-74783

Malicious code in courageouspuffinbronze-88 npm...

EUVD-2025-74353

Malicious code in potentialpuffinsapphire-94 npm...

MAL-2025-111703 Malicious code in breakable_puffin_teal-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e99b117c161b3d87a830686b57fa70a24ec71028d1b4bc79011cf327c90174d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75845

Malicious code in regionalpuffin-silentdev npm...

MAL-2025-105592 Malicious code in managing_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd03ac98e3a8a9b799c6f1c989af539049c3855b32ccaf22bdd75fbce5956b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78166

Malicious code in sunnypuffinz3n npm...

EUVD-2025-78135

Malicious code in tallpuffinz3n npm...

EUVD-2025-78659

Malicious code in outerpuffinz3n npm...

MAL-2025-109447 Malicious code in tall_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16cf147d3b4ba9692011333cbf444762c56ec564f723e094c3324ffb490352d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in robust_puffin_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a94e37e818fb9e103f5c8ecf8f62eefb257eeddc08a56cdeda9ec0be1903914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-69334

Malicious code in lengthypuffinz3n npm...