Malicious code in spatial-blue-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba1afdeb673936ef626cc56661ea35bb7102f1e5e0134fd2e389ac403ca79bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54456

Malicious code in extensive-yellow-weasel npm...

Malicious code in cautious-red-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 332780866d7f810b5ef4ab85c3d89cea9eb7972a28350f13c258656ce9cd49e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54525

Malicious code in evil-tan-weasel npm...

EUVD-2025-55891

Malicious code in amateur-emerald-weasel npm...

EUVD-2025-55653

Malicious code in blonde-green-weasel npm...

EUVD-2025-51395

Malicious code in underlying-amethyst-weasel npm...

MAL-2025-67128 Malicious code in cautious-red-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 332780866d7f810b5ef4ab85c3d89cea9eb7972a28350f13c258656ce9cd49e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70746 Malicious code in spatial-blue-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba1afdeb673936ef626cc56661ea35bb7102f1e5e0134fd2e389ac403ca79bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68193 Malicious code in extensive-yellow-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936798113876964553b9c30edf9198b6bc6164103f058fa9c57fa0f54f63c5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-58056

Malicious code in occupationalweaselz3n npm...

EUVD-2025-49263

Malicious code in successiveweaselz3n npm...

EUVD-2025-49857

Malicious code in managingweaselz3n npm...

MAL-2025-60694 Malicious code in intact_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e6b69706845324f4c4dd8273dc01c9aa3c4ea20445091ef8e8cb97412709ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60301 Malicious code in disturbing_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60b32774d8ee5b314c429a70dd198300e7175732094813f684146ada40b547c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-48711

Malicious code in ashamedweaselz3n npm...

MAL-2025-58521 Malicious code in rotten_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66acc34e70e3de9920db9f1fab7f5f0725c9a3b155df6ccfc66962c2256250d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Snow Queen 2: Bird and Weasel - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Snow Queen 2: Bird and Weasel published at the 'play' market has multiple vulnerabilities...