EUVD-2025-76785

Malicious code in garduup-tool npm...

Malicious code in combative_fish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5a3f0c15a19983abb299e373ae2c8c8fc15a180d0e9dbce6c66618b0baa706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lentengpride-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73058e125c03f5d5c8bfcd023f1e0e03ff90b8d3912cc5642090a88b8812ac97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76600

Malicious code in imperialrattlesnake-tool npm...

Malicious code in aware_mink-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0d5b798e5d3d2fabec7584edc19a56b595130041400392c9e74516237917c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74948

Malicious code in bella-tool npm...

Malicious code in grotesque_kiwi-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c1d7ebfd2a6454c020242e45fda0cb2d043fcd2c06ed2113c2fb99ccbe1da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76712

Malicious code in grotesquekiwi-tool npm...

EUVD-2025-74974

Malicious code in awaremink-tool npm...

EUVD-2025-75886

Malicious code in quintessentialptarmigan-tool npm...

EUVD-2025-75614

Malicious code in slimymacaw-tool npm...

Malicious code in remaining_parrotfish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b913b3a3307dc3e9d022dbcecd34b5f4883bb6ea0ef29c3090666a7fccafc8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77344

Malicious code in christianrooster-tool npm...

Malicious code in smiling_spoonbill-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b46379fc824495a263297a4290a39ee2f70954ee09e2361e3a27b6e3aac04f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slimy_macaw-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df2ffa342bcc1daba258480261f3bc9df6036ffaf3af3f297a9ffd46dce88ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75496

Malicious code in supremeshrimp-tool npm...

MAL-2025-109653 Malicious code in thundering_gerbil-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34aae16f08756ccfaf1875cda3fd6693785b98dc5b8e16494fc9f51417df0c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105818 Malicious code in mid_gerbil-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b73a1e376e24f4f6e19aca23c801fd1970a0f9b1219e31870e2bf59c34b46ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mobile_frog-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be780881938735641b84298ea503ee9d6ee37e462fd769269d24c69267560d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutty_meerkat-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3abb15454aa46416fee872303c6f3a4120561c0ebede87b5fa24fa5a27e35efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...