Malicious code in zeroth-pink-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f86afaa6f6bb8a17c8893beb0f3f93ee604dbe9dfec6dab22673c6cc822be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned-moccasin-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2380f7c7d5676b78e8c4b75f6a1a41af3021286a5f5b3bea45cf2d522182b98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54932

Malicious code in dependent-blue-sparrow npm...

EUVD-2025-54859

Malicious code in distant-tomato-sparrow npm...

EUVD-2025-53222

Malicious code in misleading-sapphire-sparrow npm...

EUVD-2025-54143

Malicious code in genetic-coffee-sparrow npm...

MAL-2025-67415 Malicious code in confused-red-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf993bc186af8ace13c4c7fa0b58e3ebfa8bb8f4008322a4384297f382171e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67500 Malicious code in corporate-turquoise-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce0e2a2a7ff8924301373ed0bb7d97ec93af70b3bd5d9c25d6fd5ab4043984e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67330 Malicious code in common-red-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 753faff89b4f300426746bc70b549687722edd1f4875a2baf6da599de95a4dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52137

Malicious code in selected-harlequin-sparrow npm...

EUVD-2025-55234

Malicious code in confused-red-sparrow npm...

EUVD-2025-55746

Malicious code in aware-coffee-sparrow npm...

EUVD-2025-55319

Malicious code in common-red-sparrow npm...

EUVD-2025-50877

Malicious code in zeroth-pink-sparrow npm...

EUVD-2025-53104

Malicious code in national-white-sparrow npm...

EUVD-2025-55149

Malicious code in corporate-turquoise-sparrow npm...

EUVD-2025-52749

Malicious code in planned-moccasin-sparrow npm...

EUVD-2025-51179

Malicious code in visual-pink-sparrow npm...

Malicious code in aware-coffee-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da6ce34eb3499d4e79dfa0bb48c6ea1070ae979a83510f8c532091541ddaf28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67717 Malicious code in dependent-blue-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2998ddd679fbb12ae42986becddb2dec3bece27a444f927a873f13c8a35e6850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...