EUVD-2025-77164

Malicious code in dangerousermine-silentdev npm...

EUVD-2025-76866

Malicious code in federalviper-silentdev npm...

MAL-2025-107170 Malicious code in powerful_beetle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc90956f95995e1894847973ee34a6b4fcd367254aa1bd04baafb4c62630b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103741 Malicious code in hollow_dinosaur-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8a7ef8b88ccf1ad7efe32f7bb8520f604fb0eae09220aef1dd870478c0e6593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107878 Malicious code in remaining_dragon-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11bd0bc15941556638c5cfcaabfc7572165c49042eabe1eab034a349c7ce0089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107011 Malicious code in peaceful_duck-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b7b9984972ec0eb6342b5f4de033f2d91b56089792a3ba9241c5d649ce1ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99494 Malicious code in anxious_galliform-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7eed4707215e9ccf0d54698ca030b02e60d737ffcc57476ab45aea995d445bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106379 Malicious code in northern_llama-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea1f207dbf48b34d24ac3eb6ca6dbc07f8de40d63ac539a1dc920356b499e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101369 Malicious code in detailed_giraffe-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662ea74f8ebf827fb9e8c8203f1f12475f4baf9e1568a4c5baf225ec8c3dfea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103346 Malicious code in grand_wasp-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cc3138ee54dc14dbb201e446493dc532dedadfeb84979db9e4f99da506a45be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99115 Malicious code in added_bass-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84ed473d5b18396a41ac8645c3d607e5b4a541c0930a1dbe1f9b6ba66f3f4cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104965 Malicious code in labour_ferret-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee8019964dab2a4a89613d389873258efc3e6b882c22451805f57323862d8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101647 Malicious code in distinct_vulture-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e87242fba20320f0f7ce67c5ab7dfd7e606a924aad22d9386e24988e247f488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101408 Malicious code in devoted_felidae-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f3105666e5013a45815910d01bb64904f0dc79e3837ff0f3b68830fc213cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100695 Malicious code in combative_ferret-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38b83a1790d7cc4719cc6b10c15dc3e95e841cf4cb97cfd1b06a795a8452cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hollow_dinosaur-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8a7ef8b88ccf1ad7efe32f7bb8520f604fb0eae09220aef1dd870478c0e6593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77074

Malicious code in disturbedmoth-silentdev npm...

Malicious code in few_bear-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259341745a0f317c664c93f5de5a962f1e2ffcf2312b9a7f84f0bd7500239c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76181

Malicious code in nobleclam-silentdev npm...

Malicious code in mature_possum-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd97bb7e25315553080121e7adfbf66cf03a7a651345703f269afdb9cd8a7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...