EUVD-2025-74731

Malicious code in distinctivebonobogreen-36 npm...

EUVD-2025-74303

Malicious code in regulatoryalbatrossgreen-65 npm...

EUVD-2025-74752

Malicious code in depresseddovegreen-14 npm...

EUVD-2025-74233

Malicious code in smartmolegreen-24 npm...

EUVD-2025-74511

Malicious code in jealousjackalgreen-81 npm...

EUVD-2025-74867

Malicious code in badlobstergreen-14 npm...

MAL-2025-112319 Malicious code in smart_mole_green-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 992e89915cfaa0d9c0c9c3c45f1ca1a98fe16b0d62a1fab6fd9b220ed8a088c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77539

Malicious code in progressivewormgreen-57 npm...

EUVD-2025-77444

Malicious code in assistantbuggreen-2 npm...

EUVD-2025-77447

Malicious code in artificialarmadillogreen-12 npm...

EUVD-2025-77668

Malicious code in collectivetarantulagreen-25 npm...

EUVD-2025-64190

Malicious code in existing-green-salamander npm...

EUVD-2025-54697

Malicious code in effective-green-mole npm...

EUVD-2025-55310

Malicious code in compact-green-shrimp npm...

EUVD-2025-54957

Malicious code in deliberate-green-skunk npm...

EUVD-2025-52818

Malicious code in passing-green-llama npm...

Malicious code in like-green-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecae3c0a4fb367b20a13645a16a2f5c704bbf04448166dcc860afb7bb10864d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51695

Malicious code in super-green-jaguar npm...

Malicious code in central-green-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e442f783213bf2bcb0f1b472d622924bbfab171d90bba941cae6b4d61a66b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brave-green-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b58ad63acab6c201c425758f386bcdf1f5f7fd96a2f0da7496174552962352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...