EUVD-2025-51509

Malicious code in tight-orange-crayfish npm...

EUVD-2025-52563

Malicious code in provincial-orange-quail npm...

EUVD-2025-54099

Malicious code in glorious-orange-meadowlark npm...

Malicious code in sure-orange-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88bec772d8fd0f94651c14cd2d075de568040ed1ee35ddf9d4af01bc6ca7c0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51355

Malicious code in uniform-orange-marsupial npm...

EUVD-2025-52257

Malicious code in rigid-orange-shark npm...

EUVD-2025-54728

Malicious code in early-orange-mule npm...

EUVD-2025-50998

Malicious code in written-orange-gopher npm...

EUVD-2025-53630

Malicious code in joyous-orange-gecko npm...

EUVD-2025-51191

Malicious code in violent-orange-canid npm...

EUVD-2025-51328

Malicious code in unknown-orange-haddock npm...

EUVD-2025-55088

Malicious code in crowded-orange-amphibian npm...

EUVD-2025-55069

Malicious code in cuddly-orange-rooster npm...

EUVD-2025-55180

Malicious code in convenient-orange-aphid npm...

EUVD-2025-53215

Malicious code in missing-orange-perch npm...

EUVD-2025-52201

Malicious code in rural-orange-coyote npm...

EUVD-2025-53554

Malicious code in legal-orange-carp npm...

Malicious code in wee-orange-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65973ca7c9e798bc2b5ba9cd4bdd2679ca5f6ae769ee0ad739a874991427c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in balanced-orange-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5e6003c0888bcd4e1788f38b5c97de46fd66846046e2b0b91130ce9f8e3e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible-orange-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50099a9213b21ea143f55e6dd51732b6900197e0a67ee5959f34cc278968cfba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...