MAL-2025-67889 Malicious code in dual-violet-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3042481a4b7fe74527fc7e44dd8aee34ff06bc0b38469a68bfd4eacbbb4d5d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55495

Malicious code in charming-violet-duck npm...

EUVD-2025-50983

Malicious code in xenacious-violet-woodpecker npm...

Malicious code in faithful-violet-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780a0e87ba8e20ce0f434455609e5933973f4bb8dd575541dc450d28ff6bb8af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51224

Malicious code in vast-violet-hoverfly npm...

EUVD-2025-55723

Malicious code in balanced-violet-ox npm...

EUVD-2025-52956

Malicious code in occupational-violet-tick npm...

EUVD-2025-52066

Malicious code in sharp-violet-flea npm...

EUVD-2025-51692

Malicious code in super-violet-anglerfish npm...

EUVD-2025-51970

Malicious code in slow-violet-chicken npm...

EUVD-2025-52349

Malicious code in relieved-violet-felidae npm...

EUVD-2025-54403

Malicious code in fantastic-violet-hoverfly npm...

EUVD-2025-53971

Malicious code in hilarious-violet-eagle npm...

EUVD-2025-53887

Malicious code in icy-violet-earwig npm...

EUVD-2025-54457

Malicious code in extensive-violet-fox npm...

EUVD-2025-54754

Malicious code in due-violet-ant npm...

EUVD-2025-54721

Malicious code in easy-violet-swallow npm...

EUVD-2025-54843

Malicious code in distinguished-violet-reindeer npm...

Malicious code in kind-violet-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45a9299357bf0f1a96592a661285dbdba348517df5d9dee4e723a316ca17a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-violet-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e599b93a9941dba0edb4db5932545f018187dfa2a3fc0a0c318d7ace15d41e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...