MAL-2025-77407 Malicious code in condemned_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2197dd67efe8ed82a9c5e2c30f80c6abe249a0a2d7cf267f8e293e37396bde73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whispering_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132d95e51a61abe22db2fee32040883d33142da52bd04b60aee5e9d8890fc774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53647

Malicious code in jealous-green-whale npm...

Malicious code in skinny-moccasin-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d16f791dd03bcdd9981b1b0bcc272b3c56162980e28e739786c6f138f8b3211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52174

Malicious code in scary-chocolate-whale npm...

EUVD-2025-51428

Malicious code in unable-rose-whale npm...

EUVD-2025-53532

Malicious code in lesser-pink-whale npm...

EUVD-2025-52280

Malicious code in retail-fuchsia-whale npm...

EUVD-2025-54982

Malicious code in defensive-chocolate-whale npm...

MAL-2025-70369 Malicious code in retail-fuchsia-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57fcf01baeb45153fdeb74f5950e864474bca62a8285e3b6678078932d677763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jealous-green-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63ae02c445bc7cf89c12998264d45dfbc36e4e2405e53f5ac1801e5d8658990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51998

Malicious code in skinny-moccasin-whale npm...

EUVD-2025-54542

Malicious code in eventual-turquoise-whale npm...

EUVD-2025-51965

Malicious code in small-magenta-whale npm...

EUVD-2025-52870

Malicious code in outrageous-aquamarine-whale npm...

EUVD-2025-53783

Malicious code in individual-aquamarine-whale npm...

EUVD-2025-54729

Malicious code in early-chocolate-whale npm...

EUVD-2025-54727

Malicious code in early-salmon-whale npm...

Malicious code in unable-rose-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7298374d8544f5faf21010e36db809189e2306a9b9330b323ee85be402c78776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71221 Malicious code in unable-rose-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7298374d8544f5faf21010e36db809189e2306a9b9330b323ee85be402c78776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...