EUVD-2025-53468

Malicious code in literary-yellow-haddock npm...

EUVD-2025-52147

Malicious code in secret-yellow-cicada npm...

EUVD-2025-54969

Malicious code in defiant-yellow-squirrel npm...

EUVD-2025-51004

Malicious code in worthwhile-yellow-chipmunk npm...

EUVD-2025-55156

Malicious code in cooperative-yellow-crab npm...

Malicious code in quarrelsome-yellow-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2357cfb88308df4dc284ddccc76ab81bef6bf187d78d683acf726c6e34f4357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52036

Malicious code in sick-yellow-lynx npm...

EUVD-2025-52545

Malicious code in puny-yellow-fox npm...

EUVD-2025-53875

Malicious code in ideological-yellow-wildcat npm...

EUVD-2025-52513

Malicious code in quick-yellow-carp npm...

EUVD-2025-53727

Malicious code in insufficient-yellow-peafowl npm...

Malicious code in thick-yellow-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f17db88e61b15f9b5fdfcfaea225d066c96b38cb1b10ed234a5190b0d9bdb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52968

Malicious code in obnoxious-yellow-alpaca npm...

EUVD-2025-51616

Malicious code in systematic-yellow-jellyfish npm...

Malicious code in long-yellow-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4380fdc0c59b0e6ec9eed42a7fa12eb2228be72f34ac94de3e169d650af7df05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55571

Malicious code in broad-yellow-meerkat npm...

EUVD-2025-55175

Malicious code in conventional-yellow-octopus npm...

Malicious code in fixed-yellow-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6f1cea351cef312e3ef7c1be05bf8c3d3f563cba205801620ad00122ade324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52064

Malicious code in sharp-yellow-marmot npm...

EUVD-2025-53221

Malicious code in misleading-yellow-falcon npm...