EUVD-2025-75057

Malicious code in aestheticjackal-tool npm...

EUVD-2025-76432

Malicious code in lentengflyover-tool npm...

EUVD-2025-76937

Malicious code in evolutionaryhookworm-tool npm...

Malicious code in instant_silkworm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d42c57043398db9042f7058eb8d443a92771c50ae3d01ecae2279dc313037878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75092

Malicious code in abstractsilkworm-tool npm...

EUVD-2025-76788

Malicious code in gardukereta-tool npm...

EUVD-2025-77283

Malicious code in compulsorycanidae-tool npm...

Malicious code in blushing_gazelle-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac04e79b7bd0692cfa4289d4bcea1dd1aead67021ee8d8ef57acc9b0aad73bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75683

Malicious code in selectedtern-tool npm...

Malicious code in distinct_bison-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d9684576decd0a6e2f705d7fd561fc520530ee143daf83b449b0d2b0a43f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74988

Malicious code in associatedseahorse-tool npm...

Malicious code in bella-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9946668b848be56150b7141e73c264076a59164cee2a9efc8d70ba30243656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76425

Malicious code in lentengsoes-tool npm...

EUVD-2025-76367

Malicious code in ltddragon-tool npm...

Malicious code in secret_sturgeon-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e001fdeadeee8681236b5a3ff1f7c5e65309297e17a0f8b2c30a5fee59997b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76137

Malicious code in okaygoose-tool npm...

EUVD-2025-76120

Malicious code in optimisticturtle-tool npm...

Malicious code in tragic_albatross-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01c94dc9fe5da7c0b02edbb7cbcc18440da347b97831cf258dd4445f4bf0a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic_hummingbird-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d92ea4cedf0df1638947550f4ea07d803b042ee9734223fb9cdb719248172cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid_gerbil-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b73a1e376e24f4f6e19aca23c801fd1970a0f9b1219e31870e2bf59c34b46ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...