EUVD-2025-54774

Malicious code in drunk-moccasin-finch npm...

EUVD-2025-50900

Malicious code in ytterbic-olive-finch npm...

EUVD-2025-55375

Malicious code in collective-lime-finch npm...

EUVD-2025-51638

Malicious code in sweet-azure-finch npm...

MAL-2025-67597 Malicious code in curved-rose-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4733f035a76f3a72778f0c4e738aff55017ba75200e0fd98d684ab72d0fb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71528 Malicious code in weary-white-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16495ae2092b46ca41fd4731cb90c0aab6b39bc28069a8b8ab8ccf8df05bef28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy-gold-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba2e47d83deb028c2eb11eb6f0d0b7b0ca70077c3ea41ef8796af08c1857be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53360

Malicious code in managing-chocolate-finch npm...

EUVD-2025-52649

Malicious code in primary-indigo-finch npm...

EUVD-2025-51121

Malicious code in weary-white-finch npm...

EUVD-2025-52776

Malicious code in persistent-orange-finch npm...

MAL-2025-68935 Malicious code in intelligent-ivory-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34daa4b911876f9c7b1c003a475e0b603251248f4c115aa2904919d87b49079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67419 Malicious code in conscious-peach-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200a135881159e16eb7972d175541fce5ef2aba01bc489e31d7d219e35b8dde5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67645 Malicious code in decent-chocolate-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0fec97b6603182d5bb6b2ed5d0094bb25bbf636b4fd166eb45751ac8aed98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69602 Malicious code in net-amaranth-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2daca6978b7e6c465d886eb32e5e0c828e5b6b47b9d8bfb2f098e546f813467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-57187

Malicious code in superiorfinchz3n npm...

Amazon Linux 2023 : runfinch-finch (ALAS2023-2025-1270)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1270 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL...

Amazon Linux 2 : runfinch-finch, --advisory ALAS2DOCKER-2025-081 (ALASDOCKER-2025-081)

The version of runfinch-finch installed on the remote host is prior to 1.10.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2025-081 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than...

EUVD-2025-50414

Malicious code in delicatefinchz3n npm...

EUVD-2025-45631

Malicious code in raspyfinchz3n npm...