345 matches found
EUVD-2025-52646
Malicious code in primary-tomato-minnow npm...
Malicious code in current-tomato-lemur (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d9e506cef16bae43fb33a25ba234d7eb3565bd863fe16f392284a781a8ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-55790
Malicious code in asleep-tomato-urial npm...
EUVD-2025-55170
Malicious code in convinced-tomato-hippopotamus npm...
Malicious code in willowy-tomato-mink (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bb06bb54e19101d21d06f89b5b4e447484f3a74c39ef7c11ce6033ca1caaf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51024
Malicious code in wooden-tomato-catfish npm...
EUVD-2025-53152
Malicious code in muddy-tomato-lizard npm...
EUVD-2025-52007
Malicious code in single-tomato-lizard npm...
EUVD-2025-52233
Malicious code in romantic-tomato-pheasant npm...
EUVD-2025-52481
Malicious code in rainy-tomato-coral npm...
EUVD-2025-51519
Malicious code in thoughtless-tomato-roundworm npm...
EUVD-2025-54589
Malicious code in envious-tomato-salmon npm...
EUVD-2025-50991
Malicious code in wrong-tomato-capybara npm...
EUVD-2025-52836
Malicious code in parallel-tomato-chimpanzee npm...
EUVD-2025-52692
Malicious code in practical-tomato-egret npm...
EUVD-2025-52039
Malicious code in shy-tomato-cod npm...
MAL-2025-69518 Malicious code in mutual-tomato-platypus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 771d66fbf6fcd72ddc3198e742cb9c5526a336ff4af02f2bfee042a78d03c8c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in grim-tomato-moose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbad8a54e8e2c7291fd59b975fba5b4fe06f00acb3276aa0cd96d3672fea42f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...