EUVD-2025-102087

Malicious code in stablecanidaez3n npm...

EUVD-2025-102086

Malicious code in stablepigeonz3n npm...

EUVD-2025-88675

Malicious code in stablehippopotamusz3n npm...

EUVD-2025-74201

Malicious code in stableflamingomagenta-21 npm...

EUVD-2025-78233

Malicious code in stabletyrannosaurusz3n npm...

Malicious code in stable_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338cae6fc1150d3977804ce22de50fa32ea2b1008ebf89021a6bf2e300ad2f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80465

Malicious code in stablemackerel0xrequest npm...

EUVD-2025-84176

Malicious code in stableladybugz3n npm...

EUVD-2025-73548

Malicious code in stablemousez3n npm...

MAL-2025-96742 Malicious code in stable_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4861ff90a393434ce7a232a257153aae55cea94e24f304da20a790f41ba79629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e01bafbd4dc7cf1b070e1ea1d53641fe32bd9fb828a3ed5aae4d874ecc6f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-66514

Malicious code in stableroadrunnerz3n npm...

EUVD-2025-51837

Malicious code in stable-blush-hoverfly npm...

EUVD-2025-51834

Malicious code in stable-white-iguana npm...

EUVD-2025-51836

Malicious code in stable-ivory-stingray npm...

Malicious code in stable-lavender-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe3dbebdf19034ccb5e6d9f079b34e209948046f6434e541e5e58b5b236c4fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable-blush-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bbfae98498da3b1b9b06e980f7334881de10d0d2a21a1ddd12f35bbc527650a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable-ivory-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60253aac18ccbf3661be492403f29ae2eeec8b924f277d61cb33e11dc26b5a35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-57212

Malicious code in stableseahorsez3n npm...

Stable Channel Update for Desktop

The Stable channel has been updated to 142.0.7444.162/.163 for Windows and 142.0.7444.162 for Mac and 142.0.7444.162 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and...