EUVD-2025-52776

Malicious code in persistent-orange-finch npm...

EUVD-2025-51753

Malicious code in structural-maroon-finch npm...

EUVD-2025-54774

Malicious code in drunk-moccasin-finch npm...

EUVD-2025-52484

Malicious code in rainy-gold-finch npm...

EUVD-2025-53704

Malicious code in intensive-crimson-finch npm...

EUVD-2025-52649

Malicious code in primary-indigo-finch npm...

MAL-2025-71528 Malicious code in weary-white-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16495ae2092b46ca41fd4731cb90c0aab6b39bc28069a8b8ab8ccf8df05bef28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67419 Malicious code in conscious-peach-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200a135881159e16eb7972d175541fce5ef2aba01bc489e31d7d219e35b8dde5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69602 Malicious code in net-amaranth-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2daca6978b7e6c465d886eb32e5e0c828e5b6b47b9d8bfb2f098e546f813467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55052

Malicious code in curved-rose-finch npm...

EUVD-2025-54321

Malicious code in financial-salmon-finch npm...

EUVD-2025-51638

Malicious code in sweet-azure-finch npm...

EUVD-2025-53047

Malicious code in net-amaranth-finch npm...

Malicious code in rainy-gold-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba2e47d83deb028c2eb11eb6f0d0b7b0ca70077c3ea41ef8796af08c1857be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55004

Malicious code in decent-chocolate-finch npm...

Malicious code in decent-chocolate-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0fec97b6603182d5bb6b2ed5d0094bb25bbf636b4fd166eb45751ac8aed98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67645 Malicious code in decent-chocolate-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0fec97b6603182d5bb6b2ed5d0094bb25bbf636b4fd166eb45751ac8aed98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67597 Malicious code in curved-rose-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4733f035a76f3a72778f0c4e738aff55017ba75200e0fd98d684ab72d0fb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-57187

Malicious code in superiorfinchz3n npm...

Amazon Linux 2 : runfinch-finch, --advisory ALAS2DOCKER-2025-081 (ALASDOCKER-2025-081)

The version of runfinch-finch installed on the remote host is prior to 1.10.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2025-081 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than...