EUVD-2025-56003

Malicious code in adequate-blush-bobolink npm...

EUVD-2025-55323

Malicious code in commercial-silver-planarian npm...

EUVD-2025-53542

Malicious code in legitimate-chocolate-hummingbird npm...

EUVD-2025-56085

Malicious code in @bipyruss/quantumquill npm...

EUVD-2025-55029

Malicious code in dangerous-crimson-pony npm...

EUVD-2025-53176

Malicious code in monetary-crimson-egret npm...

MAL-2025-70733 Malicious code in southern-brown-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce330f9d75ca66bd635afd62b64f2f94d82c38edd77f72930ed65e4db42d4e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67631 Malicious code in deaf-moccasin-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3d6fb230dabddc5d739c51aeb70a1c009588c2dfce5ff1b560b2f33315285c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52197

Malicious code in sacred-silver-antelope npm...

MAL-2025-68627 Malicious code in handicapped-blue-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12ac73306fa2d1e9649e76448b3a58fc5920c68e06ea10108ed3b65c39b5db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53697

Malicious code in interesting-jade-crab npm...

Malicious code in mighty-turquoise-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2539b34cb73167f8a492d043d976f9a9bd3ceecf289c4157da03492de744ae7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54642

Malicious code in embarrassed-beige-meadowlark npm...

EUVD-2025-52817

Malicious code in passing-ivory-heron npm...

EUVD-2025-55777

Malicious code in attractive-tan-landfowl npm...

EUVD-2025-54985

Malicious code in defeated-lavender-moth npm...

EUVD-2025-53514

Malicious code in liable-red-dormouse npm...

EUVD-2025-53843

Malicious code in impossible-orange-rodent npm...

EUVD-2025-53975

Malicious code in hilarious-pink-angelfish npm...

Malicious code in major-black-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64be0bce9ec1210355fec83c9e869a56fbe0b598e55aa6293b8959bf145c1ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...