EUVD-2025-51591

Malicious code in technical-rose-antelope npm...

Malicious code in sure-rose-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9212341074ae025932099d881479cfcd60c01ab4165d6e70d5aabe0acf7dc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blank-rose-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcdbb6d4817666074de895b4a215b9771475cf1a4f77284c2613d3792942870e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54097

Malicious code in glorious-rose-chipmunk npm...

Malicious code in fat-rose-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89212a1c82e9410e0cfe3c3649f02f059d2628ace716b771bc7002b8ddd5191a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52027

Malicious code in silky-rose-echidna npm...

Malicious code in unable-rose-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7298374d8544f5faf21010e36db809189e2306a9b9330b323ee85be402c78776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51537

Malicious code in thin-rose-cardinal npm...

EUVD-2025-51402

Malicious code in unconscious-rose-egret npm...

EUVD-2025-54086

Malicious code in gorgeous-rose-leopard npm...

Malicious code in weary-rose-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d7f5b2d252e761d8a7024e3e143a1cf0e7e7fd8e576b63f2beaab276882956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51178

Malicious code in visual-rose-xerinae npm...

EUVD-2025-55661

Malicious code in blank-rose-cockroach npm...

EUVD-2025-53581

Malicious code in late-rose-bee npm...

EUVD-2025-52042

Malicious code in shrill-rose-opossum npm...

EUVD-2025-51665

Malicious code in sure-rose-buzzard npm...

EUVD-2025-56079

Malicious code in able-rose-caribou npm...

Malicious code in beneficial-rose-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980079b908e05a0d49f60077f6b3fa94b75dba030fbe34944cd4d9a51cba885e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in balanced-rose-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d074f08c885d9b49e7ebd7a298cee46c28825eba28940ba3b4f861e8fd47aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary-rose-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b727651060212a60cb1256b61b518f24b0dc2b142602872a55457521669cb78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...