EUVD-2025-77435

Malicious code in blindsnail-strongdev npm...

EUVD-2025-77378

Malicious code in casualantlion-strongdev npm...

EUVD-2025-77353

Malicious code in chemicalstarfish-strongdev npm...

EUVD-2025-77322

Malicious code in clinicalvole-strongdev npm...

EUVD-2025-77300

Malicious code in compacthawk-strongdev npm...

EUVD-2025-77294

Malicious code in completeferret-strongdev npm...

EUVD-2025-77293

Malicious code in completetick-strongdev npm...

EUVD-2025-77234

Malicious code in conventionalmosquito-strongdev npm...

EUVD-2025-77220

Malicious code in cooperativepanda-strongdev npm...

EUVD-2025-77195

Malicious code in crudeantelope-strongdev npm...

EUVD-2025-77194

Malicious code in crudebird-strongdev npm...

EUVD-2025-77181

Malicious code in curiouscod-strongdev npm...

MAL-2025-103386 Malicious code in grim_panda-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 560437c90c90c0053429de53def3588b25c02e5a242d2be705789cc6d756ee95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107660 Malicious code in quiet_gibbon-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063b6ee1e609942b1c6f980503a4beeebc15fa78719026c8f099112fc2e18653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99264 Malicious code in agreed_ferret-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7568fb5b6a21c1505290c92c8cb5bff480ca4f626f42de58442f36db9d71051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100603 Malicious code in clinical_vole-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e39669e8710fec5caa3549da501cb4eb1f7253012d22a29d873c9e02475adec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110948 Malicious code in willowy_sturgeon-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c22ffe0ec2f6a8d47a89352aeab6337fe855a274d6bbf406b4ace2c67a1b49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102420 Malicious code in external_mosquito-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78bbfbd5f029bd4ca36db594ae68e5d8212ffb479ccd134997a7aa5c29cbd03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104350 Malicious code in internal_beetle-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9711b4536a8074abc2369706c0fb94ff33d015794bea749750c4d8005bdc3e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in able_giraffe-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14ca669678daf2926d030d13337c7b33ce140e75effa1f40cb6eb0c972fc70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...