EUVD-2025-117455

Malicious code in dead-beige-heron npm...

EUVD-2025-117388

Malicious code in fantastic-copper-heron npm...

EUVD-2025-117520

Malicious code in adverse-amethyst-heron npm...

EUVD-2025-117300

Malicious code in injured-tomato-heron npm...

EUVD-2025-102990

Malicious code in primaryheronz3n npm...

MAL-2025-129667 Malicious code in querulous_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82839b30463af2c8508b89ddc99a336acb50933136760c9b696a373cab2f88ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-103100

Malicious code in patientheronz3n npm...

EUVD-2025-105697

Malicious code in dutchheronz3n npm...

EUVD-2025-106561

Malicious code in architecturalheronz3n npm...

EUVD-2025-90320

Malicious code in longheronz3n npm...

Malicious code in agreeable_heron_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdca95017de572b97689b1f25237b2964c812a007cde1515521ca7175df5bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80298

Malicious code in thirstyheronreplicateautomation npm...

MAL-2025-100701 Malicious code in combined_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a52e4ce2ee1ef885651335735768e6f4f2a24a458487d51317c91f71111b4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-70558

Malicious code in ethnicheronz3n npm...

EUVD-2025-73895

Malicious code in rollingheronz3n npm...

EUVD-2025-62665

Malicious code in philosophicalheronz3n npm...

EUVD-2025-62853

Malicious code in nuttyheronrequirement npm...

EUVD-2025-73015

Malicious code in vitreousheronz3n npm...

MAL-2025-86090 Malicious code in gothic_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e8ea826c48f593fb595e26eb81ff5cc042fd8c59b701e50095d0a9ac55323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55192

Malicious code in continuing-silver-heron npm...