EUVD-2025-56079

Malicious code in able-rose-caribou npm...

EUVD-2025-51244

Malicious code in variable-rose-gopher npm...

Malicious code in visual-rose-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a79522cea948231fa43638c4e02b0967b64522b2d2fc96bea075100fb1f5d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51178

Malicious code in visual-rose-xerinae npm...

EUVD-2025-51884

Malicious code in spicy-rose-mollusk npm...

MAL-2025-69068 Malicious code in late-rose-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a3a49267017ecb787de2667b8ccfd34e0d22633c0246f4998eb4fdfd79d4a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68420 Malicious code in free-rose-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b272696f94e863e2b56b85ac9a06d05c0a77a205cbd1f8e08f5a00462ed3cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71221 Malicious code in unable-rose-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7298374d8544f5faf21010e36db809189e2306a9b9330b323ee85be402c78776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selective-rose-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d505e3329c83e460072160399bab2e77bf0e6d071db8c3af7509658ba28abb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51623

Malicious code in sympathetic-rose-peacock npm...

EUVD-2025-51188

Malicious code in visible-rose-camel npm...

EUVD-2025-52098

Malicious code in sexual-rose-scallop npm...

EUVD-2025-55704

Malicious code in beneficial-rose-perch npm...

EUVD-2025-53990

Malicious code in helpful-rose-xerinae npm...

EUVD-2025-54765

Malicious code in dry-rose-iguana npm...

MAL-2025-70622 Malicious code in silky-rose-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088a26c663c7494dbfde2050790bf881f5cbe6e3b95cce3e7f517dc8ca2669df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69080 Malicious code in leading-rose-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae151318b61013eff978e6f53c74a713cef756b48d1ed8fd045f5951018d072a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66924 Malicious code in balanced-rose-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d074f08c885d9b49e7ebd7a298cee46c28825eba28940ba3b4f861e8fd47aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67597 Malicious code in curved-rose-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4733f035a76f3a72778f0c4e738aff55017ba75200e0fd98d684ab72d0fb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69823 Malicious code in partial-rose-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ea2ed40996b8e41be803e7d2db7aa7183e5bb028d0e1b16d1ecf384f14eefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...