EUVD-2025-117426

Malicious code in eager-maroon-sturgeon npm...

EUVD-2025-105575

Malicious code in electronicsturgeonz3n npm...

MAL-2025-122508 Malicious code in petite_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c9f8a763adf9a684e708289011ed63e7b8fbe5fc695ddb7bf0fd6676fc29ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loyal_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1b6e2932205a98914f3d69adeb6885b9e0e5c11c3a27f8e727d2c862b24b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-105256

Malicious code in filthysturgeonz3n npm...

EUVD-2025-95792

Malicious code in petitesturgeonz3n npm...

Malicious code in electoral_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc28b5f10581a232b371d56590cf0d522252ef0365e978735f3cae1d218db72e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-92262

Malicious code in electoralsturgeonz3n npm...

EUVD-2025-74437

Malicious code in mysterioussturgeonturquoise-80 npm...

EUVD-2025-75024

Malicious code in alrightsturgeon-appteadev npm...

EUVD-2025-75214

Malicious code in willowysturgeon-strongdev npm...

EUVD-2025-76329

Malicious code in marxiststurgeon-smiletea npm...

EUVD-2025-77150

Malicious code in deafeningsturgeon-strongdev npm...

EUVD-2025-75692

Malicious code in secretsturgeon-tool npm...

Malicious code in elated_sturgeon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1060cba27e50c8beba5386ebbda2810aec051c26923d0f7d04ef740581e48d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy_sturgeon-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c22ffe0ec2f6a8d47a89352aeab6337fe855a274d6bbf406b4ace2c67a1b49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76150

Malicious code in obnoxioussturgeon-apptea npm...

EUVD-2025-79162

Malicious code in geneticsturgeonz3n npm...

EUVD-2025-78276

Malicious code in socialsturgeonz3n npm...

EUVD-2025-78674

Malicious code in operationalsturgeonz3n npm...