EUVD-2025-75453

Malicious code in testypuma-strongdev npm...

EUVD-2025-75638

Malicious code in significantroundworm-strongdev npm...

EUVD-2025-75494

Malicious code in surprisedhummingbird-strongdev npm...

Malicious code in melted_rook-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf6c7627a1ec20e21d610d0de36a712b9c8ffbf995fe155689669a40e0ee27c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy_sturgeon-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c22ffe0ec2f6a8d47a89352aeab6337fe855a274d6bbf406b4ace2c67a1b49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77043

Malicious code in dryweasel-strongdev npm...

EUVD-2025-77195

Malicious code in crudeantelope-strongdev npm...

EUVD-2025-76555

Malicious code in injuredcat-strongdev npm...

EUVD-2025-74923

Malicious code in bizarreconstrictor-strongdev npm...

EUVD-2025-76090

Malicious code in otherwoodpecker-strongdev npm...

Malicious code in grumpy_ox-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aab34d13f1ccdeddda64e741ef9113e36a5fc93b2a111ec4a5fabaa6c40818d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76892

Malicious code in extratakin-strongdev npm...

EUVD-2025-76235

Malicious code in musicalstoat-strongdev npm...

Malicious code in huge_monkey-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbc04b1760624ecc3e1d64ad83ac69cb035bebe31243592ef2f25600f0d6954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electronic_boar-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea5a127f729e00a29e97c781bc3c1600eb4f0f4047981d367cffbb8f924af5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unpleasant_leech-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a58e14a54043da48538a957b34d7f18e69301a32f7997e0792706aad946efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76571

Malicious code in independentjunglefowl-strongdev npm...

EUVD-2025-76525

Malicious code in internalbeetle-strongdev npm...

EUVD-2025-75479

Malicious code in symbolicgrouse-strongdev npm...

MAL-2025-102420 Malicious code in external_mosquito-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78bbfbd5f029bd4ca36db594ae68e5d8212ffb479ccd134997a7aa5c29cbd03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...