EUVD-2025-51178

Malicious code in visual-rose-xerinae npm...

EUVD-2025-51122

Malicious code in weary-rose-marmot npm...

EUVD-2025-51010

Malicious code in worrying-rose-centipede npm...

EUVD-2025-50869

Malicious code in zesty-rose-salamander npm...

Malicious code in balanced-rose-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d074f08c885d9b49e7ebd7a298cee46c28825eba28940ba3b4f861e8fd47aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial-rose-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980079b908e05a0d49f60077f6b3fa94b75dba030fbe34944cd4d9a51cba885e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blank-rose-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcdbb6d4817666074de895b4a215b9771475cf1a4f77284c2613d3792942870e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boiling-rose-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4498da734a7f8037fd72d392c1692a1645643af23b5b4389028476e43a63ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curved-rose-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4733f035a76f3a72778f0c4e738aff55017ba75200e0fd98d684ab72d0fb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged-rose-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6864f956817e62d551e1ffdfa62e3f5f356d9fbf61e309f57844970eab6ed5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in definite-rose-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068badb64fdc14214c5588d9edb8e9a9c9523b416af7dea06f3229a91979d569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in direct-rose-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41eabef9e4528b0703f8da8a80686dd829da3c1a345d6483a15f39c5264831d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in direct-rose-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e116832e7747d6637d84e2be364e075e4b9f25a332e8a84bae80c27642108c5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equivalent-rose-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da82e72c4315d982aee6aeab4fd387972ed302aaf02618d128a4aa8a3819d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat-rose-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89212a1c82e9410e0cfe3c3649f02f059d2628ace716b771bc7002b8ddd5191a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in free-rose-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b272696f94e863e2b56b85ac9a06d05c0a77a205cbd1f8e08f5a00462ed3cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fun-rose-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4bbbc1283ccb9d5328664b4f856e6f1f31c08f7860db0b845572c05dbb5f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-rose-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a45eaaeb696a35d74b044628f2e629befbc5e4b56040e65b9255c7e0a5f921c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in late-rose-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a3a49267017ecb787de2667b8ccfd34e0d22633c0246f4998eb4fdfd79d4a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leading-rose-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae151318b61013eff978e6f53c74a713cef756b48d1ed8fd045f5951018d072a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...