EUVD-2025-53894

Malicious code in icy-amaranth-otter npm...

EUVD-2025-51001

Malicious code in written-amaranth-swift npm...

EUVD-2025-52371

Malicious code in relaxed-amaranth-thrush npm...

EUVD-2025-53092

Malicious code in naughty-amaranth-swordfish npm...

EUVD-2025-54115

Malicious code in gleaming-amaranth-deer npm...

EUVD-2025-55675

Malicious code in bitter-amaranth-goat npm...

EUVD-2025-55674

Malicious code in bitter-amaranth-starfish npm...

Malicious code in racial-amaranth-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f200330347de6690edb8cda654e69b76db589ac0420ba01df4017a4b92808ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55822

Malicious code in architectural-amaranth-anteater npm...

MAL-2025-69602 Malicious code in net-amaranth-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2daca6978b7e6c465d886eb32e5e0c828e5b6b47b9d8bfb2f098e546f813467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned-amaranth-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1294a944e54ed5aa67c36b18af359324b140f69b8f411f1fea3d3aae1f03f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51410

Malicious code in unchanged-amaranth-alpaca npm...

EUVD-2025-54644

Malicious code in embarrassed-amaranth-reptile npm...

Malicious code in flying-amaranth-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73b2d80540bc5205d211cf4017dd5090358cb30a92ceb4e2c2e269e2df11cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66989 Malicious code in blind-amaranth-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698e76686e61628f27e10e2a84158cdf025190b7bd0fe4fcbdfc37c2cd441dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68591 Malicious code in grim-amaranth-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a85e46e99697482cd6ec15bc93e27cf4afea62524dc8f972e2f536d0e42b49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69562 Malicious code in naval-amaranth-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90229ce65a8b5e22ea1dacdcbebfa2821a1c4b2529a7a4e267b459b2eef4803d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69561 Malicious code in naval-amaranth-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56daea3b4df95092392eece269653c7092d0a8fbbe3afc80673c1c51b2ff4d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66611 Malicious code in accessible-amaranth-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5b912d2f52ff2c50ca4b9726f5104b58e8fe33f98bda27f7cef6abc2aa276e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66947 Malicious code in better-amaranth-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86a37b8840eadf6ef74ff1d3d364d711427bd0a7c5fc9a52652b12b74e7ea3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...