EUVD-2025-51010

Malicious code in worrying-rose-centipede npm...

EUVD-2025-53069

Malicious code in neat-rose-silverfish npm...

EUVD-2025-52826

Malicious code in partial-rose-galliform npm...

EUVD-2025-55633

Malicious code in boiling-rose-felidae npm...

EUVD-2025-52825

Malicious code in partial-rose-yak npm...

EUVD-2025-52828

Malicious code in parliamentary-rose-swallow npm...

Malicious code in equivalent-rose-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da82e72c4315d982aee6aeab4fd387972ed302aaf02618d128a4aa8a3819d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liable-rose-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79f5add4fbbb81f0fac67bdc4123b3a85a0501852b8807b0f9018bd0f896e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51838

Malicious code in squealing-rose-rhinoceros npm...

EUVD-2025-53707

Malicious code in intense-rose-herring npm...

EUVD-2025-53990

Malicious code in helpful-rose-xerinae npm...

Malicious code in near-rose-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc42bb732ab33de9de4e60010ed2f863080e2ae022367345e2dfec5b0e438742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55861

Malicious code in annoyed-rose-goldfish npm...

EUVD-2025-55164

Malicious code in cooing-rose-clownfish npm...

EUVD-2025-53800

Malicious code in increased-rose-hedgehog npm...

EUVD-2025-54195

Malicious code in fun-rose-pinniped npm...

EUVD-2025-53384

Malicious code in main-rose-echidna npm...

EUVD-2025-52790

Malicious code in peculiar-rose-guppy npm...

EUVD-2025-51244

Malicious code in variable-rose-gopher npm...

Malicious code in national-rose-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c997e51972b3e2a69c821650e276440bf460f1e86ecc83d31131c6e2874fe04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...