EUVD-2025-179927

Malicious code in byte-decompress-cold-deploy-wind npm...

EUVD-2025-179686

Malicious code in cold-bad-theta-epsilon-route npm...

EUVD-2025-178960

Malicious code in export-hot-cold-orchestrate-awk npm...

EUVD-2025-179382

Malicious code in decode-export-data-cold-error npm...

Malicious code in omicron-query-air-cold-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf2ab953418ed4cb1f746b6fb3179574ad14d8670dc1414ab46934e8199dd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179745

Malicious code in chi-mu-socket-cold-small npm...

EUVD-2025-178093

Malicious code in link-cold-file-mock-info npm...

EUVD-2025-178897

Malicious code in finally-stack-error-cold-assert npm...

EUVD-2025-179681

Malicious code in cold-old-monitor-zeta-process npm...

EUVD-2025-179850

Malicious code in cat-minify-cold-reject-monitor npm...

EUVD-2025-175398

Malicious code in zeta-cold-notify-fire-easy npm...

EUVD-2025-176143

Malicious code in sun-cold-upsilon-deploy-hash npm...

EUVD-2025-180008

Malicious code in book-sanitize-cat-cold-class npm...

Malicious code in cold-azure-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34cd52b0166de72ca40e67be1e05b988770cd6030acc466099657a5a05dd5f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117484

Malicious code in cold-azure-thrush npm...

EUVD-2025-100360

Malicious code in coldarmadilloz3n npm...

EUVD-2025-100358

Malicious code in coldrattlesnakez3n npm...

EUVD-2025-77318

Malicious code in coldfish-toolteadev npm...

MAL-2025-100650 Malicious code in cold_narwhal-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 417323c5bd74adb9bca667511bf935416aa4378a2a02f84f1e3b65496de8b11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_fish-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34004d00d052cd1b2bea79a68671d1c658075b69c7cf57e901b10704f594c534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...