EUVD-2025-86160

Malicious code in extremestarfishz3n npm...

EUVD-2025-67350

Malicious code in recentstarfishz3n npm...

EUVD-2025-84738

Malicious code in metropolitanstarfishz3n npm...

EUVD-2025-86963

Malicious code in betterstarfishz3n npm...

EUVD-2025-61389

Malicious code in youngstarfishz3n npm...

EUVD-2025-62071

Malicious code in vulnerablestarfishz3n npm...

MAL-2025-88422 Malicious code in metropolitan_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17e4622ad1d2b6babad74e4eac8dc6ef49845c87805221e30801cc07d7805bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52791

Malicious code in peculiar-red-starfish npm...

EUVD-2025-52721

Malicious code in popular-green-starfish npm...

EUVD-2025-51007

Malicious code in worthwhile-chocolate-starfish npm...

EUVD-2025-56048

Malicious code in academic-ivory-starfish npm...

EUVD-2025-52345

Malicious code in religious-peach-starfish npm...

EUVD-2025-55674

Malicious code in bitter-amaranth-starfish npm...

MAL-2025-66831 Malicious code in architectural-gray-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6801021e23535bd63c61f0282086a3dbf82aedfcfb4ba23190f870227bf25e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54773

Malicious code in drunk-salmon-starfish npm...

EUVD-2025-55838

Malicious code in apparent-red-starfish npm...

EUVD-2025-54283

Malicious code in fluffy-tan-starfish npm...

EUVD-2025-54522

Malicious code in evolutionary-yellow-starfish npm...

EUVD-2025-55818

Malicious code in architectural-gray-starfish npm...

Malicious code in bitter-amaranth-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f685da90c788d49cc51fa687222e101b05dc039c5915454556f1deba7f221632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...