294 matches found
MAL-2025-96891 Malicious code in surprised_salmon_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c411f7a0f7c9ce28eba231278d88ce7de34b2a54c5749fa5c61a1a251744b475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-64297
Malicious code in enthusiasticsalmonz3n npm...
EUVD-2025-85035
Malicious code in lexicalsalmonz3n npm...
EUVD-2025-53183
Malicious code in modest-salmon-swordfish npm...
EUVD-2025-52054
Malicious code in shivering-salmon-junglefowl npm...
EUVD-2025-52055
Malicious code in shivering-salmon-boar npm...
EUVD-2025-51154
Malicious code in vocational-salmon-flea npm...
EUVD-2025-53545
Malicious code in legislative-salmon-flea npm...
EUVD-2025-53132
Malicious code in mutual-salmon-constrictor npm...
EUVD-2025-51905
Malicious code in sparkling-black-salmon npm...
EUVD-2025-55837
Malicious code in apparent-salmon-vole npm...
Malicious code in many-salmon-cuckoo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5463e708a8f0fb05a6d933ee1535e2ad0708dce53b7628cf513b1787a41ed881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53497
Malicious code in likely-aquamarine-salmon npm...
EUVD-2025-51171
Malicious code in vitreous-salmon-ptarmigan npm...
Malicious code in colorful-salmon-bass (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 925b6a676cc54d442f9cf4d9a0e35a4f7f3a2a17d8b587b766a88db3af628638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53989
Malicious code in helpful-salmon-boar npm...
EUVD-2025-54773
Malicious code in drunk-salmon-starfish npm...
Malicious code in payable-salmon-piranha (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7536737b1f08db227ce6ea8fab6eedc8ca99ab4f17b0ec66f0d9a051ea550e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...