248 matches found
EUVD-2025-53418
Malicious code in loyal-plum-limpet npm...
EUVD-2025-54271
Malicious code in following-plum-planarian npm...
Malicious code in mass-plum-vicuna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c150a916bc8e026094eb584ae62e81f7c72fd45faa1b7940e731af5936b540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53401
Malicious code in mad-plum-grasshopper npm...
EUVD-2025-54996
Malicious code in decisive-plum-limpet npm...
EUVD-2025-50894
Malicious code in yummy-plum-whitefish npm...
EUVD-2025-56043
Malicious code in acceptable-plum-swordfish npm...
EUVD-2025-51159
Malicious code in vocal-plum-leech npm...
EUVD-2025-54956
Malicious code in deliberate-plum-kingfisher npm...
EUVD-2025-53064
Malicious code in necessary-plum-harrier npm...
Malicious code in slim-plum-wasp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3e570edf098ff4ff8ba812c1c9b406057e1ea61acf5529d436fb67df83c70e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in certain-plum-gamefowl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93541c3718afd1725034bc803bc16c84f81ff6c69c6fc842a7b252895edc5503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54291
Malicious code in flat-plum-mandrill npm...
EUVD-2025-53733
Malicious code in institutional-plum-hedgehog npm...
EUVD-2025-53665
Malicious code in irrelevant-plum-impala npm...
EUVD-2025-51465
Malicious code in tremendous-plum-peacock npm...
EUVD-2025-51095
Malicious code in western-plum-cougar npm...
EUVD-2025-54591
Malicious code in envious-plum-cuckoo npm...
MAL-2025-71309 Malicious code in united-plum-caribou (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea82fdc7ef193e7155758160395eac8f6aa8bb71637d861681cddac5d4f8a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...