EUVD-2025-117004

Malicious code in very-bronze-swan npm...

Malicious code in central-black-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bd430632870231228667d0ac88248fd249f6f82033daedb7a8f2f97f0ec02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in just-tomato-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b49b879957372f901c553ab6a20037d0354e055a1991bfb2a9d9646e228f340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117280

Malicious code in just-tomato-swan npm...

EUVD-2025-117498

Malicious code in central-black-swan npm...

MAL-2025-138604 Malicious code in central-black-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bd430632870231228667d0ac88248fd249f6f82033daedb7a8f2f97f0ec02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-100701

Malicious code in voluntaryswanz3n npm...

EUVD-2025-99265

Malicious code in enviousswanz3n npm...

EUVD-2025-87779

Malicious code in wildswanz3n npm...

EUVD-2025-92259

Malicious code in electricswanz3n npm...

Malicious code in mechanical_swan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab360a403d65c6ff03478509e9f67237046dc8cf579aaf66bc58f342b8c0379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluminous_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a9f82183e69f34b3b3472332f2cf80fe77ff69fcf7a278ff3074f2976d0b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-70959

Malicious code in cruelswanz3n npm...

EUVD-2025-62585

Malicious code in preciousswanz3n npm...

EUVD-2025-73722

Malicious code in shinyswanz3n npm...

Malicious code in probable-orange-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8fefd5f80432172444d14dc59273fc60342d7219922f3e2f0e072720c0f0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54475

Malicious code in experienced-brown-swan npm...

Malicious code in verbal-coffee-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e3248299f353b359f54950b7f642e3430c8abb8e87d4f0c5b261a0e6f5dda0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52193

Malicious code in safe-yellow-swan npm...

EUVD-2025-51765

Malicious code in striking-copper-swan npm...