Malicious code in fit-olive-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d49f5f4d4558f3788ce82a2e896cd1e2e84abf89af33792e5faff81af79c57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54303

Malicious code in fit-purple-gamefowl npm...

EUVD-2025-54305

Malicious code in fit-blue-smelt npm...

EUVD-2025-54304

Malicious code in fit-olive-tiglon npm...

Malicious code in fit-tan-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dee556fad25f8d992baffe9ed11b7ec4401e71e2174d494be215624f83db094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fit-blue-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892323eebce3f6875acbc6c803a1b0db1f06ea05e91fd1822687c6075bdd45e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fit_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9faf142606d4ee2beaee0315da228643d85f6dc903fc922343c2b8844d42a5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60478 Malicious code in fit_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9faf142606d4ee2beaee0315da228643d85f6dc903fc922343c2b8844d42a5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50190

Malicious code in fithorsez3n npm...

Malicious code in fit_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8484e107273655473fd3a39f4d12e438dfca4ecb2a74f351a34ac9a61ec7c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-47642

Malicious code in fitangelfishz3n npm...

EUVD-2020-3096

Malware in sbrugna...

EUVD-2018-15635

Malware in sbrugna...

EUVD-2012-3214

Malware in sbrugna...

EUVD-2021-13905

Malware in sbrugna...

EUVD-2021-13868

Malware in sbrugna...

EUVD-2019-9083

Malware in sbrugna...

EUVD-2025-27409

Malicious code in bioql PyPI...

EUVD-2025-5387

Malicious code in bioql PyPI...

CVE-2025-59797

Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/id and also URLs for eversports, the user-management page, and the plane page...