EUVD-2025-54228

Malicious code in free-yellow-sturgeon npm...

EUVD-2025-51327

Malicious code in unknown-yellow-cattle npm...

Malicious code in fixed-yellow-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6f1cea351cef312e3ef7c1be05bf8c3d3f563cba205801620ad00122ade324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53695

Malicious code in interesting-yellow-lobster npm...

EUVD-2025-51758

Malicious code in strong-yellow-bobolink npm...

Malicious code in ashamed-yellow-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ad03db1e1444b2e556fbca151679c71a7567a020a16022d96d62f6b071b298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54638

Malicious code in embarrassed-yellow-llama npm...

EUVD-2025-55537

Malicious code in capitalist-yellow-perch npm...

EUVD-2025-51037

Malicious code in witty-yellow-swordfish npm...

EUVD-2025-53727

Malicious code in insufficient-yellow-peafowl npm...

MAL-2025-70272 Malicious code in related-yellow-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97cc6b7bcbf334684aa1a74bde5fb5fd02cdf2fcde2200107229fad4a30bbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69623 Malicious code in noble-yellow-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8efd085855bb24a4aa7c8e0c865476864140dba662862555a723cc60434388e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67078 Malicious code in broad-yellow-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08b76a383ef375cd50953de58c44b6dbc59c5275aee7b4fe163aad27f08c787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70891 Malicious code in strong-yellow-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f82edad58dc5ec590499f6e6f99a2c635b05861a0b154ea4beaf5f923fdb0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69681 Malicious code in obnoxious-yellow-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32481e795ca7662abb02637902614c312a81e53c38ca282b9df1f8284234c3c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70502 Malicious code in secret-yellow-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ad635d4c6091c56afe5a7e377f5e7fcd50e01e772744c49b10b52887cd85af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67056 Malicious code in breezy-yellow-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c9e699ee3352a3d144f6c7950c8f1c2afea65b52acbcff7880c9be4f7408a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70464 Malicious code in satisfactory-yellow-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845d40c6c3927f80ecd280c1d0a31befe1e573f991754d690c65bd8603e86657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69201 Malicious code in local-yellow-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301c42a74a5be9343f5353efb6bdc9b511fabd842b30a9c3917605e0e1169ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71263 Malicious code in unemployed-yellow-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ba3e903df9704e54ced43950551d0260939c2b3525c89af263f72d7a8f1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...