EUVD-2025-53542

Malicious code in legitimate-chocolate-hummingbird npm...

EUVD-2025-55323

Malicious code in commercial-silver-planarian npm...

EUVD-2025-56003

Malicious code in adequate-blush-bobolink npm...

EUVD-2025-53283

Malicious code in mere-apricot-ermine npm...

EUVD-2025-50964

Malicious code in xerothermic-blush-stoat npm...

EUVD-2025-55029

Malicious code in dangerous-crimson-pony npm...

MAL-2025-67631 Malicious code in deaf-moccasin-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3d6fb230dabddc5d739c51aeb70a1c009588c2dfce5ff1b560b2f33315285c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chsiantur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52a87760f6c9e18bf4012259382f27f27d5fe26b91e1109ec22792c5cf42bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70733 Malicious code in southern-brown-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce330f9d75ca66bd635afd62b64f2f94d82c38edd77f72930ed65e4db42d4e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53386

Malicious code in main-moccasin-baboon npm...

EUVD-2025-54642

Malicious code in embarrassed-beige-meadowlark npm...

EUVD-2025-53697

Malicious code in interesting-jade-crab npm...

EUVD-2025-52197

Malicious code in sacred-silver-antelope npm...

EUVD-2025-53975

Malicious code in hilarious-pink-angelfish npm...

Malicious code in mighty-turquoise-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2539b34cb73167f8a492d043d976f9a9bd3ceecf289c4157da03492de744ae7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54985

Malicious code in defeated-lavender-moth npm...

EUVD-2025-53514

Malicious code in liable-red-dormouse npm...

Malicious code in major-black-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64be0bce9ec1210355fec83c9e869a56fbe0b598e55aa6293b8959bf145c1ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53728

Malicious code in insufficient-red-chickadee npm...

MAL-2025-67234 Malicious code in close-sapphire-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbe72a172ae6bf06d7def88d6187e24e9f75de9bb4076b297926991c3e37f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...