EUVD-2025-55069

Malicious code in cuddly-orange-rooster npm...

EUVD-2025-51354

Malicious code in uniform-orange-stork npm...

EUVD-2025-53599

Malicious code in kind-orange-cattle npm...

EUVD-2025-51423

Malicious code in unacceptable-orange-walrus npm...

EUVD-2025-50850

Malicious code in zygomorphic-orange-bedbug npm...

EUVD-2025-51118

Malicious code in wee-orange-duck npm...

EUVD-2025-52080

Malicious code in shallow-orange-antlion npm...

EUVD-2025-51321

Malicious code in unnecessary-orange-jellyfish npm...

EUVD-2025-55180

Malicious code in convenient-orange-aphid npm...

EUVD-2025-56033

Malicious code in accessible-orange-walrus npm...

Malicious code in rigid-orange-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4318b5396edf0efe3232597772662834928726d714f4bc279015987863ccf387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51105

Malicious code in welcome-orange-whitefish npm...

EUVD-2025-54666

Malicious code in electric-orange-whippet npm...

EUVD-2025-53847

Malicious code in implicit-orange-egret npm...

EUVD-2025-52527

Malicious code in quaint-orange-hippopotamus npm...

Malicious code in wee-orange-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65973ca7c9e798bc2b5ba9cd4bdd2679ca5f6ae769ee0ad739a874991427c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55840

Malicious code in apparent-orange-junglefowl npm...

EUVD-2025-51226

Malicious code in vast-orange-tiglon npm...

EUVD-2025-53851

Malicious code in imperial-orange-bird npm...

Malicious code in rural-orange-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a00a22a5963761ed0d5429b8fbb00dd6a8b38115524fdf1280d5a0d062bfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...