EUVD-2025-52703

Malicious code in possible-tomato-cockroach npm...

EUVD-2025-54459

Malicious code in extended-tomato-ermine npm...

EUVD-2025-51646

Malicious code in surviving-tomato-octopus npm...

EUVD-2025-52743

Malicious code in plastic-tomato-heron npm...

EUVD-2025-52630

Malicious code in prior-tomato-moose npm...

EUVD-2025-55282

Malicious code in complete-tomato-tiger npm...

MAL-2025-70696 Malicious code in smiling-tomato-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28ad0c551330fa2445de8ff8aa8d40a6369fd92527a45dcc331f9987013f88e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69813 Malicious code in parallel-tomato-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dee76d153cdb3635360c8258f7e0d2fd0c3147fdaaa8b9d36ab7799d18169cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66859 Malicious code in asleep-tomato-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e64fc7961f56bcf86a1efd626540a3da7f6ebbb8f256f118cee2e73df49e5db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51117

Malicious code in wee-tomato-marsupial npm...

Malicious code in worried-tomato-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e95347c8b65e1fb56be829007c8ef7f1bb48237812f8ee62a6a78d6a47a0a725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sound-tomato-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eff64cdaccb03c9854b3c8ffcd6319045a7164be087153801e1f1a7799bc22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55927

Malicious code in alert-tomato-roundworm npm...

EUVD-2025-53319

Malicious code in mathematical-tomato-asp npm...

EUVD-2025-51829

Malicious code in stale-tomato-snail npm...

EUVD-2025-51918

Malicious code in sound-tomato-hare npm...

EUVD-2025-53096

Malicious code in natural-tomato-bobcat npm...

MAL-2025-67584 Malicious code in cultural-tomato-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88206fb18403f46a4f2f8d3c6a9eae4761d3ac805024d357ad0ece5af55cea3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71459 Malicious code in violent-tomato-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cf7af52b83ed1bcae37d7e545132d9579f732ec12f0676a0fcb55a46b2c4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71532 Malicious code in wee-tomato-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35815aaae04a5b7a193c6956050cdf9feab7e8f1cc58e4ba7c6eff06a5520f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...