EUVD-2025-117157

Malicious code in progressive-pink-pheasant npm...

EUVD-2025-117347

Malicious code in glorious-pink-hyena npm...

Malicious code in agreeable-pink-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975f42095004558e2c264eef50b6062220d338eefbc544e78141142bf6a25787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139080 Malicious code in tired-pink-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21223ebc4b925a1c5bd80e1e7a30662c0864466865d1c85a8fe8e2a210e12cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74610

Malicious code in givengoldfishpink-75 npm...

EUVD-2025-74204

Malicious code in spotlessbasspink-38 npm...

EUVD-2025-74633

Malicious code in formalcrowpink-2 npm...

EUVD-2025-74448

Malicious code in mistythrushpink-77 npm...

EUVD-2025-74052

Malicious code in zygomorphicsheeppink-49 npm...

EUVD-2025-74549

Malicious code in imaginativeimpalapink-64 npm...

EUVD-2025-74403

Malicious code in openhedgehogpink-57 npm...

EUVD-2025-77534

Malicious code in quarrelsomesalmonpink-97 npm...

EUVD-2025-77663

Malicious code in compulsoryflypink-59 npm...

EUVD-2025-77466

Malicious code in wilyhedgehogpink-88 npm...

EUVD-2025-77525

Malicious code in royalgerbilpink-6 npm...

EUVD-2025-77463

Malicious code in worthwhilelionpink-17 npm...

Malicious code in puma_pink-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4db39401ab1964b13e7e2a8a03c7af49370696001302a529fff1bc6f7827cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64762

Malicious code in conventional-pink-weasel npm...

EUVD-2025-64595

Malicious code in delicate-pink-sailfish npm...

Malicious code in oral-pink-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb645def62edb4bee8723d3d08a9108dc9c12888d6c28e11632855c35b2d21fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...