EUVD-2025-117146

Malicious code in puzzled-yellow-sole npm...

EUVD-2025-117079

Malicious code in spare-yellow-cow npm...

EUVD-2025-117211

Malicious code in neat-yellow-flyingfish npm...

EUVD-2025-117494

Malicious code in chemical-yellow-gazelle npm...

EUVD-2025-117094

Malicious code in silly-yellow-mammal npm...

EUVD-2025-117504

Malicious code in bright-yellow-ermine npm...

EUVD-2025-74548

Malicious code in immenseotteryellow-52 npm...

EUVD-2025-74697

Malicious code in empiricalguanacoyellow-76 npm...

EUVD-2025-74472

Malicious code in manualyakyellow-29 npm...

EUVD-2025-74103

Malicious code in visitingcephalopodyellow-50 npm...

EUVD-2025-74901

Malicious code in agreeableponyyellow-15 npm...

MAL-2025-112325 Malicious code in socialist_tick_yellow-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1cfe0cba432a144cd73f2a359521e46a3136dc4a5b4815ee44f2c14ae8150c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74545

Malicious code in improvednewtyellow-96 npm...

EUVD-2025-77448

Malicious code in annualjayyellow-85 npm...

EUVD-2025-77643

Malicious code in dyingelephantyellow-67 npm...

Malicious code in dying_elephant_yellow-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef62b10fbeba29c91b2488cd2ce7822a598848429150182c6aa794fa95459c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-71811

Malicious code in verbalyellowwildcat-32-tisubasah npm...

EUVD-2025-72281

Malicious code in kindyellowsnipe-70-tisubasah npm...

EUVD-2025-72659

Malicious code in butterflyyellow-44-tisubasah npm...

MAL-2025-97631 Malicious code in butterfly_yellow-44-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b424e6ea4059700db4e245c7841c7ada606e574a836af4f70d7b936bdc991ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...