EUVD-2025-55615

Malicious code in bottom-fuchsia-crayfish npm...

EUVD-2025-55509

Malicious code in changing-fuchsia-iguana npm...

EUVD-2025-55385

Malicious code in cold-fuchsia-tyrannosaurus npm...

EUVD-2025-51621

Malicious code in systematic-fuchsia-cougar npm...

EUVD-2025-52070

Malicious code in sharp-fuchsia-heron npm...

EUVD-2025-52382

Malicious code in regulatory-fuchsia-junglefowl npm...

EUVD-2025-55810

Malicious code in arrogant-fuchsia-smelt npm...

EUVD-2025-52280

Malicious code in retail-fuchsia-whale npm...

EUVD-2025-54714

Malicious code in economic-fuchsia-opossum npm...

EUVD-2025-53343

Malicious code in marked-fuchsia-orangutan npm...

Malicious code in sad-fuchsia-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807679db298f387cf489cf9dcea6db3d6142d87d356389a29622e7ca9775212a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52194

Malicious code in sad-fuchsia-rooster npm...

EUVD-2025-54135

Malicious code in geographical-fuchsia-booby npm...

EUVD-2025-54073

Malicious code in grateful-fuchsia-asp npm...

EUVD-2025-51580

Malicious code in temporary-fuchsia-bass npm...

EUVD-2025-53433

Malicious code in lost-fuchsia-impala npm...

EUVD-2025-51940

Malicious code in solar-fuchsia-camel npm...

EUVD-2025-53703

Malicious code in intensive-fuchsia-jaguar npm...

MAL-2025-70369 Malicious code in retail-fuchsia-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57fcf01baeb45153fdeb74f5950e864474bca62a8285e3b6678078932d677763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67552 Malicious code in crooked-fuchsia-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2674798ae8d454c04ca54600a82ddb297b30bb147d68d80fe5e480516d5638c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...