EUVD-2025-52245

Malicious code in rival-yellow-camel npm...

EUVD-2025-54377

Malicious code in fat-yellow-mole npm...

EUVD-2025-53860

Malicious code in immediate-yellow-swift npm...

EUVD-2025-55379

Malicious code in cold-yellow-crab npm...

EUVD-2025-52513

Malicious code in quick-yellow-carp npm...

Malicious code in steady-yellow-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9018b11d024cfc31360f40cdbc772401d09176953b124ccf887d966b7276f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67078 Malicious code in broad-yellow-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08b76a383ef375cd50953de58c44b6dbc59c5275aee7b4fe163aad27f08c787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70464 Malicious code in satisfactory-yellow-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845d40c6c3927f80ecd280c1d0a31befe1e573f991754d690c65bd8603e86657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54297

Malicious code in fixed-yellow-blackbird npm...

EUVD-2025-53221

Malicious code in misleading-yellow-falcon npm...

MAL-2025-70502 Malicious code in secret-yellow-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ad635d4c6091c56afe5a7e377f5e7fcd50e01e772744c49b10b52887cd85af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55129

Malicious code in costly-yellow-toucan npm...

MAL-2025-71151 Malicious code in top-yellow-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c377d19d27521e4dc0c083d30f73aa6b5f83497cbcae5b66a72cc500ba58c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54456

Malicious code in extensive-yellow-weasel npm...

EUVD-2025-53958

Malicious code in holy-yellow-tahr npm...

EUVD-2025-55571

Malicious code in broad-yellow-meerkat npm...

Malicious code in free-yellow-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9b1c69c03009528cda8e5e561ec0f9fd04f27952e2d2d24037d4f0b1832320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed-yellow-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ad03db1e1444b2e556fbca151679c71a7567a020a16022d96d62f6b071b298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69681 Malicious code in obnoxious-yellow-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32481e795ca7662abb02637902614c312a81e53c38ca282b9df1f8284234c3c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arrogant-yellow-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edcf36442d099b2eba3cd30c143244d6f5dfb4abe2e5f28ed668b1cb70d06300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...