EUVD-2025-74705

Malicious code in electoraljaguarlavender-16 npm...

Malicious code in chronic_koi_lavender-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6babac4db933f86c80f65fc6738edc75578dad9b1f32c6a6a37fc3a0478fd570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74247

Malicious code in shyskunklavender-9 npm...

EUVD-2025-74649

Malicious code in financialhalibutlavender-61 npm...

EUVD-2025-77575

Malicious code in loudsnakelavender-68 npm...

EUVD-2025-77508

Malicious code in stripednewtlavender-73 npm...

EUVD-2025-73590

Malicious code in special-lavender-loon npm...

EUVD-2025-55669

Malicious code in bizarre-lavender-scallop npm...

EUVD-2025-54268

Malicious code in fond-lavender-junglefowl npm...

Malicious code in corresponding-lavender-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c6ed012164c4bc33ba30d02ff0f86c655792b20b1fa0d74ac10d9986cd32e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52906

Malicious code in ordinary-lavender-spider npm...

EUVD-2025-52455

Malicious code in raspy-lavender-rabbit npm...

EUVD-2025-54978

Malicious code in defensive-lavender-herring npm...

EUVD-2025-55139

Malicious code in corresponding-lavender-gull npm...

Malicious code in rare-lavender-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705a4dda27f852836f363ce3e89772b5dfe376bebc837113f01f21cde4d64ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53818

Malicious code in inappropriate-lavender-reptile npm...

Malicious code in mean-lavender-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52a837ad873b655c58edf67bed3a3bf07ccbd2be99f953fc0a9309c81efda23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salty-lavender-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4cb694f39cb777ee074dd89404ac213a6420db8e855eeb033922d65f20040e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thorough-lavender-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f3f83ccf9c7089557e3d5063f3e7bf330cf5f2ad24fe0a7cf5d59d851dff39c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sure-lavender-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57ef68b890ccfe9c21f6ab90acc527c1308176143727e4d9016d0859c2c2e2b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...