394 matches found
EUVD-2025-55888
Malicious code in amateur-tomato-pony npm...
EUVD-2025-55860
Malicious code in annoyed-tomato-primate npm...
EUVD-2025-55790
Malicious code in asleep-tomato-urial npm...
EUVD-2025-55730
Malicious code in back-tomato-dog npm...
EUVD-2025-55656
Malicious code in blind-tomato-parrot npm...
EUVD-2025-55511
Malicious code in certain-tomato-goose npm...
EUVD-2025-52692
Malicious code in practical-tomato-egret npm...
EUVD-2025-55055
Malicious code in current-tomato-lemur npm...
EUVD-2025-52684
Malicious code in precious-tomato-shrew npm...
EUVD-2025-54897
Malicious code in different-tomato-bison npm...
EUVD-2025-51931
Malicious code in sophisticated-tomato-kiwi npm...
EUVD-2025-51646
Malicious code in surviving-tomato-octopus npm...
EUVD-2025-54280
Malicious code in fluttering-tomato-bear npm...
MAL-2025-70513 Malicious code in selected-tomato-seahorse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c818ef8c96f71b5bd5f5e247edb25ca30cbff584daa0107d3a581eb908e924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-69497 Malicious code in muddy-tomato-lizard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0644260efde82c154e24baed4e6141e899eb1cdbef449f0b7ee862305d7167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-55282
Malicious code in complete-tomato-tiger npm...
MAL-2025-69518 Malicious code in mutual-tomato-platypus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 771d66fbf6fcd72ddc3198e742cb9c5526a336ff4af02f2bfee042a78d03c8c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-67584 Malicious code in cultural-tomato-herring (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88206fb18403f46a4f2f8d3c6a9eae4761d3ac805024d357ad0ece5af55cea3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...