EUVD-2025-117474

Malicious code in concerned-purple-slug npm...

Malicious code in latin_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9588bd5298ae71d3e6ffa2fd6e153a8c2fd654a4b0a6a9604e58439ad26149b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cec595ac9ae7dfc1b37c7e19efe674523a37d35b42ec7643cfa52cbd738b5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130130 Malicious code in silky_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d4ec88866f4d08ca5b0047db14094b7b2b3c6ceaefedb60eb5687cc439f52c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-105445

Malicious code in excessslugz3n npm...

EUVD-2025-105699

Malicious code in dullslugz3n npm...

EUVD-2025-95123

Malicious code in seriousslugz3n npm...

EUVD-2025-93888

Malicious code in yabberingslugz3n npm...

MAL-2025-118943 Malicious code in better_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f390247d78da12c9acf2f1bfc2605825c602a7dcb03140a73159dde2c9ac04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-92698

Malicious code in compactslugz3n npm...

Malicious code in missing_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a93c35c1eaa3c1a5aa4ff9625e0b8799b84c86e952ced93a81d1df12c28b611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-91902

Malicious code in fewslugz3n npm...

EUVD-2025-91077

Malicious code in influentialslugz3n npm...

EUVD-2025-90386

Malicious code in liquidslugz3n npm...

EUVD-2025-74214

Malicious code in specialslugorange-76 npm...

EUVD-2025-76015

Malicious code in plainslug-apptea npm...

EUVD-2025-76209

Malicious code in nearbyslug-strongdev npm...

EUVD-2025-76042

Malicious code in peculiarslug-gooddev npm...

EUVD-2025-75400

Malicious code in troubledslug-appteadev npm...

Malicious code in troubled_slug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d699a0bf3df0c70bd254b5b4994b7c02a02cfae6584bc1e74395f6bc9ae5dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...