EUVD-2025-55888

Malicious code in amateur-tomato-pony npm...

EUVD-2025-54755

Malicious code in due-tomato-pigeon npm...

EUVD-2025-54446

Malicious code in extreme-tomato-sheep npm...

EUVD-2025-51711

Malicious code in sudden-tomato-baboon npm...

EUVD-2025-55927

Malicious code in alert-tomato-roundworm npm...

EUVD-2025-55511

Malicious code in certain-tomato-goose npm...

EUVD-2025-52233

Malicious code in romantic-tomato-pheasant npm...

EUVD-2025-54344

Malicious code in female-tomato-swordfish npm...

EUVD-2025-54487

Malicious code in exclusive-tomato-pinniped npm...

EUVD-2025-53131

Malicious code in mutual-tomato-platypus npm...

EUVD-2025-54937

Malicious code in democratic-tomato-salmon npm...

MAL-2025-68244 Malicious code in fancy-tomato-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd00a7a746476d5e8a788c9f497c5292b2111b276b43553caac5cb5fab0e7c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71532 Malicious code in wee-tomato-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35815aaae04a5b7a193c6956050cdf9feab7e8f1cc58e4ba7c6eff06a5520f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55741

Malicious code in awful-tomato-albatross npm...

EUVD-2025-50991

Malicious code in wrong-tomato-capybara npm...

EUVD-2025-53260

Malicious code in mighty-tomato-louse npm...

Malicious code in brainy-tomato-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447519bb24a15ea0fefd750380d1c0950f555489134aa2e73ebae574bad4b381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convinced-tomato-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff2b60278e03279f791966c9bff1be323be12941524a4c377d0e9a16094b1ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite-tomato-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d8e3b86d9f72edab82c0e3082b44d471dc00893e74adc3b51ebc064442f512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mobile-tomato-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff78b3de8a92f8ea5a05ce91db4b9cf64b73603a239011682f515685736c20b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...