EUVD-2025-55800

Malicious code in artistic-orange-harrier npm...

EUVD-2025-53215

Malicious code in missing-orange-perch npm...

EUVD-2025-52776

Malicious code in persistent-orange-finch npm...

EUVD-2025-55184

Malicious code in controversial-orange-puma npm...

Malicious code in awake-orange-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d7a7d451a9a3d9be93b378099ec4a567e024dbd5ad9edf0d1cfc410bf3605b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50998

Malicious code in written-orange-gopher npm...

EUVD-2025-52772

Malicious code in personal-orange-chicken npm...

EUVD-2025-54196

Malicious code in fun-orange-manatee npm...

EUVD-2025-51031

Malicious code in wonderful-orange-gull npm...

Malicious code in sacred-orange-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3def5374dcf1443cc7f3a71ba9236118f60308dbcd68e469b53cc653a559622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55726

Malicious code in balanced-orange-orca npm...

EUVD-2025-55560

Malicious code in bumpy-orange-planarian npm...

EUVD-2025-52454

Malicious code in raspy-orange-gopher npm...

EUVD-2025-55752

Malicious code in awake-orange-dormouse npm...

EUVD-2025-52780

Malicious code in permanent-orange-ox npm...

EUVD-2025-54526

Malicious code in evil-orange-lynx npm...

EUVD-2025-54543

Malicious code in eventual-orange-flamingo npm...

MAL-2025-68439 Malicious code in front-orange-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9705a099d95cf8a4ec09a3028753c3ad3a744afe1d1204ca5d100cffa199c233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67089 Malicious code in bumpy-orange-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4ecb1da48175d3be0dcb4391fe19e75a11b55818129a0cfdd41ec738ffd9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68313 Malicious code in few-orange-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97b1c8c3eecab41b696b86851346ecfac37e182f047f9bfc77c977d371e2f587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...