EUVD-2025-53695

Malicious code in interesting-yellow-lobster npm...

Malicious code in special-yellow-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4806075a97830de22dd5f0815ac9dd71c27c68733d6895ad9937efadbc541aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53988

Malicious code in helpful-yellow-guineafowl npm...

EUVD-2025-55748

Malicious code in awake-yellow-kingfisher npm...

EUVD-2025-52185

Malicious code in satisfactory-yellow-flea npm...

EUVD-2025-53271

Malicious code in mid-yellow-gayal npm...

EUVD-2025-54896

Malicious code in different-yellow-flamingo npm...

EUVD-2025-53115

Malicious code in narrow-yellow-giraffe npm...

Malicious code in decisive-yellow-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a88b768d7758c0b3bbb3cc65dd11d05e11ad813106ed2b7bad4781fc9a6db745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53161

Malicious code in motionless-yellow-guppy npm...

Malicious code in resident-yellow-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff8c0117020f7e954bf8a61e491e651236e577857f748ed72e8ef66867073a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54492

Malicious code in exciting-yellow-flyingfish npm...

EUVD-2025-51498

Malicious code in top-yellow-amphibian npm...

EUVD-2025-51632

Malicious code in swift-yellow-mastodon npm...

EUVD-2025-53751

Malicious code in initial-yellow-impala npm...

Malicious code in ashamed-yellow-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ad03db1e1444b2e556fbca151679c71a7567a020a16022d96d62f6b071b298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed-yellow-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ba3e903df9704e54ced43950551d0260939c2b3525c89af263f72d7a8f1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved-yellow-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1dee708b72007ae81d4c195984d449a2d1d90e946ea51e149509d98652839f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53958

Malicious code in holy-yellow-tahr npm...

Malicious code in urgent-yellow-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec6a8edc225597c51f05633ae3f20a7723c3c37df4914c7ef072a3fd46c413c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...