EUVD-2025-54984

Malicious code in defeated-plum-firefly npm...

EUVD-2025-51759

Malicious code in strong-coffee-firefly npm...

EUVD-2025-54313

Malicious code in firm-emerald-firefly npm...

EUVD-2025-51014

Malicious code in worried-tomato-firefly npm...

EUVD-2025-53528

Malicious code in level-copper-firefly npm...

EUVD-2025-51709

Malicious code in sudden-yellow-firefly npm...

MAL-2025-67786 Malicious code in distant-black-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3687641bfde87687e580cc2375259f9d9673ef0215e6057ba65fe3e5bb0c8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67611 Malicious code in daily-turquoise-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a89f7bb083589d66e915fb0656d554e943e56a512dfa8eb063b65eebcff3918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-57349

Malicious code in silkyfireflyz3n npm...

MAL-2025-65290 Malicious code in silky_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc3e360d74176f011450e2f7e4ca0c07901a890bbf43107c2b9107cf7dff9847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-57238

Malicious code in smartfireflyz3n npm...

Malicious code in disturbed_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4459cbdc5adfa2efd1942249f29631886f232b5b2c29f2ddc58db3bd6b7e458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-48704

Malicious code in autonomousfireflyz3n npm...

EUVD-2025-46360

Malicious code in medievalfireflyz3n npm...

EUVD-2025-48444

Malicious code in chosenfireflyz3n npm...

EUVD-2025-44291

Malicious code in yelpingfireflyz3n npm...

MAL-2025-56562 Malicious code in grubby_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19c70c8605c2cc3fbc82c020115009baf24d30e7700633f0a236dd70d71847e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview firefly-sdk-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-36837

Malicious code in firefly-sdk-js npm...

Malicious code in firefly-sdk-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa500d2c9575be38d669c176c963359a471ba4af4853d21ba5031d9f8ed93b33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...