EUVD-2025-55978

Malicious code in advanced-maroon-pig npm...

EUVD-2025-54104

Malicious code in global-indigo-pig npm...

Malicious code in global-indigo-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84bd80928a69ea83e9f509aa2a56e785d5305d967cd5cd21241a08bb723c2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55177

Malicious code in conventional-jade-pig npm...

EUVD-2025-52473

Malicious code in random-teal-pig npm...

EUVD-2025-52759

Malicious code in physical-aqua-pig npm...

EUVD-2025-51492

Malicious code in tory-maroon-pig npm...

Malicious code in tory-maroon-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58356074918161717db590f0cb301a246bbbd1e486e56552069ce1ceb1527122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55067

Malicious code in cultural-emerald-pig npm...

EUVD-2025-52982

Malicious code in obedient-black-pig npm...

EUVD-2025-51986

Malicious code in slight-scarlet-pig npm...

EUVD-2025-54266

Malicious code in foolish-azure-pig npm...

EUVD-2025-52516

Malicious code in quick-coral-pig npm...

Malicious code in quick-coral-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c7b11baa470ef145ea756e8c3931c824ff7bf8dc8e4c4e4cdd3d71f669dd83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55420

Malicious code in clinical-yellow-pig npm...

MAL-2025-70176 Malicious code in random-teal-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e29515e6d6547a7316994f2114846cdee0c005e2cc6d2fe2eece2ce81e55f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71157 Malicious code in tory-maroon-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58356074918161717db590f0cb301a246bbbd1e486e56552069ce1ceb1527122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sticky_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45af53d67f87d7ebfc4a7014c0e4e573ad9922927f44a962373a9ff717d1ed3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56847 Malicious code in inherent_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ba87aba1fa1c5daf2ea43e1dc7fa535fcd98dfd7146731d9e2127055ba8d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-63690

In pig-mesh Pig versions 3.8.2 and below, when setting up scheduled tasks in the Quartz management function under the system management module, it is possible to execute any Java class with a parameterless constructor and its methods with parameter type String through reflection. At this time, th...