EUVD-2025-53525

Malicious code in level-yellow-crow npm...

MAL-2025-69623 Malicious code in noble-yellow-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8efd085855bb24a4aa7c8e0c865476864140dba662862555a723cc60434388e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69201 Malicious code in local-yellow-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301c42a74a5be9343f5353efb6bdc9b511fabd842b30a9c3917605e0e1169ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52545

Malicious code in puny-yellow-fox npm...

EUVD-2025-52526

Malicious code in quaint-yellow-woodpecker npm...

EUVD-2025-53784

Malicious code in indirect-yellow-sheep npm...

EUVD-2025-52185

Malicious code in satisfactory-yellow-flea npm...

MAL-2025-71263 Malicious code in unemployed-yellow-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ba3e903df9704e54ced43950551d0260939c2b3525c89af263f72d7a8f1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67056 Malicious code in breezy-yellow-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c9e699ee3352a3d144f6c7950c8f1c2afea65b52acbcff7880c9be4f7408a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52955

Malicious code in occupational-yellow-guineafowl npm...

Malicious code in circular-yellow-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd48e4515f4491e495e1f80799832ef20aeb3b01c3e2bbbd614bbecf6c6e210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55420

Malicious code in clinical-yellow-pig npm...

EUVD-2025-53727

Malicious code in insufficient-yellow-peafowl npm...

EUVD-2014-5645

Malware in sbrugna...

EUVD-2018-2828

Malware in sbrugna...

EUVD-2008-6999

Malware in sbrugna...

EUVD-2023-23396

Malicious code in bioql PyPI...

MAL-2025-45536 Malicious code in penguin-yellow-wne519-project (npm)

The package penguin-yellow-wne519-project was found to contain malicious code...

Malicious code in penguin-yellow-wne519-project (npm)

The package penguin-yellow-wne519-project was found to contain malicious code...

Malicious code in quasar-tg7y2-6giyl-yellow-project (npm)

The package quasar-tg7y2-6giyl-yellow-project was found to contain malicious code...