Malicious code in unnecessary-orange-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6eae587ae41284c1f76ad05643384a0aa2892d69003a116abd2968431adc2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51509

Malicious code in tight-orange-crayfish npm...

EUVD-2025-50998

Malicious code in written-orange-gopher npm...

EUVD-2025-53554

Malicious code in legal-orange-carp npm...

EUVD-2025-53215

Malicious code in missing-orange-perch npm...

Malicious code in wee-orange-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65973ca7c9e798bc2b5ba9cd4bdd2679ca5f6ae769ee0ad739a874991427c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52257

Malicious code in rigid-orange-shark npm...

EUVD-2025-51355

Malicious code in uniform-orange-marsupial npm...

EUVD-2025-51191

Malicious code in violent-orange-canid npm...

EUVD-2025-55069

Malicious code in cuddly-orange-rooster npm...

EUVD-2025-51328

Malicious code in unknown-orange-haddock npm...

EUVD-2025-50850

Malicious code in zygomorphic-orange-bedbug npm...

EUVD-2025-51814

Malicious code in steady-orange-dolphin npm...

EUVD-2025-52622

Malicious code in probable-orange-swan npm...

EUVD-2025-54728

Malicious code in early-orange-mule npm...

EUVD-2025-52563

Malicious code in provincial-orange-quail npm...

Malicious code in circular-orange-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3845e5081d880790843d44c871664ce82315ebe1913fbaccd6511a418ef760b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51118

Malicious code in wee-orange-duck npm...

Malicious code in rigid-orange-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4318b5396edf0efe3232597772662834928726d714f4bc279015987863ccf387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown-orange-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bed840e0a98c6c82c8445f0a7a0e955447706de7a631f3be46923f13ca4691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...