EUVD-2025-75878

Malicious code in racialgiraffe-strongdev npm...

EUVD-2025-75658

Malicious code in sharedsnail-strongdev npm...

Malicious code in specific_dragonfly-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92057b2181385eb28852b2bbd8e2a40c07397e3eb4eaf312fa0774bbb7c3b728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76209

Malicious code in nearbyslug-strongdev npm...

EUVD-2025-77194

Malicious code in crudebird-strongdev npm...

EUVD-2025-77322

Malicious code in clinicalvole-strongdev npm...

Malicious code in symbolic_grouse-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c76a11131d20127ba2d18f5d7f1de768c5a7de580e47f16f61ce4c1ff4a17e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77300

Malicious code in compacthawk-strongdev npm...

EUVD-2025-75214

Malicious code in willowysturgeon-strongdev npm...

MAL-2025-100603 Malicious code in clinical_vole-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e39669e8710fec5caa3549da501cb4eb1f7253012d22a29d873c9e02475adec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75859

Malicious code in readyleopard-strongdev npm...

EUVD-2025-76169

Malicious code in nosywren-strongdev npm...

MAL-2025-104350 Malicious code in internal_beetle-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9711b4536a8074abc2369706c0fb94ff33d015794bea749750c4d8005bdc3e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107660 Malicious code in quiet_gibbon-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063b6ee1e609942b1c6f980503a4beeebc15fa78719026c8f099112fc2e18653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...