EUVD-2025-55120

Malicious code in creative-aqua-crayfish npm...

EUVD-2025-51003

Malicious code in worthy-aqua-mollusk npm...

Malicious code in level-aqua-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1080c08842338178824d12a0dd1267a9d38ac725da62ac95a1df8145161273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54771

Malicious code in dry-aqua-platypus npm...

EUVD-2025-54885

Malicious code in direct-aqua-beetle npm...

EUVD-2025-52131

Malicious code in selfish-aqua-finch npm...

EUVD-2025-53530

Malicious code in level-aqua-turtle npm...

EUVD-2025-54532

Malicious code in evident-aqua-hedgehog npm...

EUVD-2025-52834

Malicious code in parental-aqua-landfowl npm...

EUVD-2025-54351

Malicious code in fellow-aqua-limpet npm...

EUVD-2025-50908

Malicious code in youthful-aqua-magpie npm...

EUVD-2025-55700

Malicious code in better-aqua-smelt npm...

Malicious code in vivid-aqua-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11dc37fff44a5e62dddd8cbf40b3903605463bc45996550ab2d392162a89e17e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54785

Malicious code in dreadful-aqua-stingray npm...

EUVD-2025-53021

Malicious code in normal-aqua-bird npm...

EUVD-2025-55110

Malicious code in criminal-aqua-guppy npm...

EUVD-2025-53228

Malicious code in misleading-aqua-ape npm...

EUVD-2025-51311

Malicious code in unusual-aqua-flyingfish npm...

Malicious code in compatible-aqua-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ddff50ac37b1d4ca212d4388c8e24af0fc8cb7b3f0044ca24975dbafc47461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned-aqua-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f43b075f682aa8cadcfe15854f6c79448acb195e1b67c6d96418cea018d9a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...