417 matches found
MAL-2025-70901 Malicious code in subjective-amber-narwhal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba082f3db73056c1df3726e1625caf2e364664a36bfc2037e15bd81f29dbc6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in informal-amber-boar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe934a4c075b93f09e518998cacbf44a3990fba13cb1dbd5ddf24cab6099ac60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53947
Malicious code in honest-amber-cheetah npm...
EUVD-2025-55821
Malicious code in architectural-amber-leopon npm...
EUVD-2025-53079
Malicious code in near-amber-snipe npm...
EUVD-2025-51542
Malicious code in thin-amber-bird npm...
EUVD-2025-51480
Malicious code in toxic-amber-trout npm...
Malicious code in spiritual-amber-catfish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc4f5d94082d509532e8f71e20e1cd25eda9ff05a84379206bc281175df88437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-55500
Malicious code in charming-amber-marten npm...
EUVD-2025-52944
Malicious code in okay-amber-beaver npm...
EUVD-2025-53306
Malicious code in mechanical-amber-monkey npm...
Malicious code in joint-amber-bovid (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56330ae901124e9d732a548eaa2622003ced4591c4c5e7ff43149cd05f9b27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hungry-amber-yak (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ab10333c4399bb21af31a3bff8ce7c7619f2ee6e1a4398e141fbfd88cf2efa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51880
Malicious code in spiritual-amber-catfish npm...
EUVD-2025-55071
Malicious code in cuddly-amber-meadowlark npm...
EUVD-2025-54114
Malicious code in gleaming-amber-lobster npm...
EUVD-2025-55689
Malicious code in big-amber-earthworm npm...
EUVD-2025-55902
Malicious code in alone-amber-turkey npm...