EUVD-2025-76424

Malicious code in lentengstasiun-tool npm...

EUVD-2025-75886

Malicious code in quintessentialptarmigan-tool npm...

EUVD-2025-74974

Malicious code in awaremink-tool npm...

EUVD-2025-76712

Malicious code in grotesquekiwi-tool npm...

Malicious code in slimy_macaw-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df2ffa342bcc1daba258480261f3bc9df6036ffaf3af3f297a9ffd46dce88ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77053

Malicious code in dramaticnarwhal-tool npm...

EUVD-2025-76094

Malicious code in orthodoxcoyote-tool npm...

Malicious code in useless_starfish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842b5990384858bd4404b884f5ccbc0a7d581f6755fadd5c9ce56a4da8b98612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76785

Malicious code in garduup-tool npm...

Malicious code in grotesque_kiwi-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c1d7ebfd2a6454c020242e45fda0cb2d043fcd2c06ed2113c2fb99ccbe1da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad_hyena-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cfda6716a0350135771e3c31b2ed8c3a8f33534858aa034a491960d40c1616e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remaining_parrotfish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b913b3a3307dc3e9d022dbcecd34b5f4883bb6ea0ef29c3090666a7fccafc8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky_shark-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1b11904fff151f41159a8261d281ae9e426d7cb1dbbf5eacd56f4f6bcec908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky_bobcat-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3601e920ffd49c7f3d59fc9ce0d8935b5eb3b4c8eb1c5ca1f876a2e8dbec0da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75987

Malicious code in preciousminnow-tool npm...

Malicious code in bored_bird-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6545fe9ba2a5e4fe4b42d1339a3cfb21e748d25d398f8b9aedf57dee3bdc8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75614

Malicious code in slimymacaw-tool npm...

EUVD-2025-75866

Malicious code in rattyape-tool npm...

EUVD-2025-75602

Malicious code in smilingspoonbill-tool npm...

Malicious code in lentengpride-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73058e125c03f5d5c8bfcd023f1e0e03ff90b8d3912cc5642090a88b8812ac97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...