EUVD-2025-92679

Malicious code in confusedponyz3n npm...

EUVD-2025-90327

Malicious code in liveponyz3n npm...

EUVD-2025-89753

Malicious code in occupationalponyz3n npm...

EUVD-2025-92381

Malicious code in easternponyz3n npm...

EUVD-2025-74901

Malicious code in agreeableponyyellow-15 npm...

EUVD-2025-74158

Malicious code in theoreticalponycrimson-37 npm...

EUVD-2025-74719

Malicious code in dutchponymaroon-22 npm...

EUVD-2025-77227

Malicious code in convincedpony-smiletea npm...

EUVD-2025-77699

Malicious code in basicponyz3n npm...

EUVD-2025-78675

Malicious code in operationalponyz3n npm...

EUVD-2025-81491

Malicious code in invisiblepony0xrequest npm...

EUVD-2025-80207

Malicious code in unemployedpony0xrequest npm...

EUVD-2025-79789

Malicious code in arrogantponydumbs npm...

Malicious code in supreme_pony_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57772d6874f6fecf899fe86b63f5c58e2ea6820a527f2c0b422a9faee0c465e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80785

Malicious code in rearpony0xrequest npm...

EUVD-2025-82122

Malicious code in eagerpony0xrequest npm...

EUVD-2025-80886

Malicious code in printedpony0xrequest npm...

MAL-2025-100108 Malicious code in bright_pony_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7a4798aff9eabd0d7f5f3c43cbbd9524d8d8a9dfe41bbf5a086af585916f88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in invisible_pony_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710288f46f89219312a2cd0385f4f090d8b11ebf0329e910ed5789b997c9f500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed_pony_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db60cb4758a57e365146a1f19c28f7d503cab8931bf82d716e5708244691ce1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...