EUVD-2025-53675

Malicious code in intimate-lime-parakeet npm...

EUVD-2025-53411

Malicious code in lucky-lime-gorilla npm...

EUVD-2025-53369

Malicious code in mammoth-lime-halibut npm...

EUVD-2025-55214

Malicious code in constant-lime-alpaca npm...

EUVD-2025-54872

Malicious code in disabled-lime-dormouse npm...

EUVD-2025-54820

Malicious code in dizzy-lime-woodpecker npm...

EUVD-2025-54592

Malicious code in envious-lime-ape npm...

EUVD-2025-54552

Malicious code in ethnic-lime-basilisk npm...

EUVD-2025-52921

Malicious code in opposite-lime-cheetah npm...

EUVD-2025-54087

Malicious code in gorgeous-lime-beaver npm...

EUVD-2025-51927

Malicious code in sore-lime-bird npm...

EUVD-2025-55048

Malicious code in cute-lime-cheetah npm...

MAL-2025-69728 Malicious code in opposite-lime-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ff88ebe00d3b5760aef3f55b9e96a7d2b1bafd325e83a41d9255bfe3a2fe98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69055 Malicious code in known-lime-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573cba47d4497d24a67d65a7d66be9acf1c72597dde8ac48fb9394f896958640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial-lime-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b88fc66701e898d1e2dd4966a8f5f7f7cc27484f35402f0f16c39846071256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55813

Malicious code in armed-lime-silverfish npm...

Malicious code in handsome-lime-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323bce7e95771abd60e13cea52b545c7b18228480d10622d52cfa32defcc141a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isolated-lime-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d0a67f7b15f1064e5c279642cc60c40664831ea46b8402babbee020bf09654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55841

Malicious code in apparent-lime-cricket npm...

EUVD-2025-51636

Malicious code in sweet-lime-dormouse npm...