EUVD-2025-53138

Malicious code in mute-amethyst-slug npm...

EUVD-2025-56068

Malicious code in absolute-amethyst-crayfish npm...

MAL-2025-70837 Malicious code in steep-amethyst-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070a241362e60d187a1acaf9d4b4d3a4dc829a163f14fe02eaccdd8794c71b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67076 Malicious code in broad-amethyst-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e263cdb263adfee24f06fe9872ea96c8179d80f1a28b8626d73a5d2d878f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71768 Malicious code in zeroth-amethyst-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac91ada7b05525b22693985238e195698b0e6d9d44daa056408a432a6a9f168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54242

Malicious code in fragile-amethyst-lion npm...

MAL-2025-69899 Malicious code in planned-amethyst-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1dbe179b2e68e2538332172aa823d6f5881c05992b72625f43b5269ed12cf42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68348 Malicious code in fixed-amethyst-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f1bf92c3027d74632b1d1eb659fba82e6c3a8f815d9ee9262eab62a077219a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67289 Malicious code in colossal-amethyst-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b4e208b0b8efd7073a4b1b8d378e77f4572925287b7df4f541215c6e067dd81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67429 Malicious code in consistent-amethyst-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e56b72a8b3c32c5a155c336e42b93d36b407007be5dbd22fc353f4f4cef38ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69991 Malicious code in pretty-amethyst-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df03eaa61ba43a8ff44f016d8cd1923c7ac2d1a20a13c7fa8fcc08ca3374097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70242 Malicious code in redundant-amethyst-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ee274d8d379fcb47e73967a3ed7b93d0f3f6febddd5fa80af85eb6da54912f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69907 Malicious code in pleasant-amethyst-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6e95ad8b1dfc09738ad6cf1f0e09fd14a0e9f8e242655bbdca1de6dbe80638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68108 Malicious code in everyday-amethyst-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca70174db2a4256de313328bf7e7ab7be8ed32fd9e89c9e2756112331c5842c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68588 Malicious code in grieving-amethyst-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747575ade7f734a7f2a68f956dc0d042ef62ddbfa251fba3fe90dc5b0c8845ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

AsgoreCore (>=0.1.0 <=0.1.2), RustyBox (=0.1.0) +425 more potentially affected by unknown CVE via xcb (>=0.10.1 <=1.2.2)

xcb CARGO version =0.10.1, =0.1.0, =0.1.0, =0.4.0, =0.1.0, =1.0.9, =0.6.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-655H-HG88-5QMF...

Malicious code in amethyst-301km-w9k8k-indigo-project (npm)

The package amethyst-301km-w9k8k-indigo-project was found to contain malicious code...

Malicious code in amethyst-ztku8-20y7b-jungle-project (npm)

The package amethyst-ztku8-20y7b-jungle-project was found to contain malicious code...

Malicious code in amethyst-kzlga-fybv8-ultra-project (npm)

The package amethyst-kzlga-fybv8-ultra-project was found to contain malicious code...

Malicious code in amethyst-2b7d4-vsh0l-dusk-project (npm)

The package amethyst-2b7d4-vsh0l-dusk-project was found to contain malicious code...