EUVD-2025-76294

Malicious code in mentalimpala-teagooddev npm...

EUVD-2025-77000

Malicious code in electorallion-smiletea npm...

EUVD-2025-76977

Malicious code in endlessllama-appteadev npm...

EUVD-2025-76793

Malicious code in futurespider-appteadev npm...

EUVD-2025-76715

Malicious code in grosscarp-apptea npm...

EUVD-2025-76704

Malicious code in gtyyrg-devapptea npm...

EUVD-2025-76555

Malicious code in injuredcat-strongdev npm...

CVE-2025-5452

creationtimestamp| type| source ---|---|--- 2025-11-11 07:31:30+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5dmk4sw46k2 2025-11-11 10:28:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5dwhtgnhh2s...

EUVD-2025-78638

Malicious code in partialsheepz3n npm...

EUVD-2025-79497

Malicious code in crookedvicunaz3n npm...

EUVD-2025-79428

Malicious code in differentmonkeyz3n npm...

EUVD-2025-79423

Malicious code in digitaldovez3n npm...

EUVD-2025-78173

Malicious code in successivehaddockz3n npm...

EUVD-2025-79349

Malicious code in elaborateflamingoz3n npm...

EUVD-2025-79555

Malicious code in conservativealpacaz3n npm...

Malicious code in influential_duck_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163001fe7831a7831aed43eec4d33a9154715d435b60ecdee206ac71fe1d3acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80808

Malicious code in raspyant0xrequest npm...

EUVD-2025-80792

Malicious code in realturkeydumbs npm...

EUVD-2025-80767

Malicious code in regulartigerdumbs npm...

EUVD-2025-80430

Malicious code in stingystingray0xrequest npm...