EUVD-2025-106753

Malicious code in controversialpheasantz3n npm...

EUVD-2025-105994

Malicious code in controversialreptilez3n npm...

Malicious code in controversial_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c63ade7ddfa3cef1d1f1e023d33b53cec286b8b8072856f65af1ed2166fd64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-92661

Malicious code in controversialmothz3n npm...

EUVD-2025-92662

Malicious code in controversialmoosez3n npm...

MAL-2025-113222 Malicious code in controversial_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbf88844c2187fbd376acac2153ec6e0fccff71a4d4ab341d8d68c203077e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77235

Malicious code in controversialbee-silentdev npm...

EUVD-2025-79530

Malicious code in controversialdeerz3n npm...

EUVD-2025-82375

Malicious code in controversialgalliform0xrequest npm...

Malicious code in controversial_galliform_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93338cbf813da06094571f3b409c8ad41262ead0b269e441aca4a16ae428a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64765

Malicious code in controversialclownfishz3n npm...

EUVD-2025-64766

Malicious code in controversialcatz3n npm...

Malicious code in controversial-blush-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74268585cafe04b13ac1648b205bd954184697ca6b99ce1c0cb8268cca0e33af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55185

Malicious code in controversial-blush-walrus npm...

EUVD-2025-55184

Malicious code in controversial-orange-puma npm...

MAL-2025-67465 Malicious code in controversial-orange-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ebdea4521e4382b775bb2b870bf75429aac7aa0555ba0dbfe8b4a36230a7541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60237

Malicious code in controversialstingrayz3n npm...

Malicious code in controversial_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6cc7765e25b9088e213498ba49897e442d9bb82545ffc4233a3b0207bb55dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50489

Malicious code in controversialcamelz3n npm...

Internal Emails Reveal How a Controversial Gun-Detection AI System Found Its Way to NYC

NYC mayor Eric Adams wants to test Evolv’s gun-detection tech in subway stations—despite the company saying it’s not designed for that environment. Emails obtained by WIRED show how the company still found an in...