EUVD-2025-124799

Malicious code in module-xml-meteor-meissa npm...

Malicious code in eslint-plugin-perseus-css-loader-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0ddf1aabd198f85639e9d3b3af0ae998cbc891b75eba766e8f9d4bc57097d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111943

Malicious code in kinetic-europa-apex-sadr npm...

EUVD-2025-116715

Malicious code in andromeda-xenos-relay-npm npm...

EUVD-2025-116497

Malicious code in astro-geckodriver-janus-helios npm...

EUVD-2025-115739

Malicious code in canopus-pavo-hexo-metalsmith npm...

EUVD-2025-112349

Malicious code in izar-subscription-bootes-kinetic npm...

EUVD-2025-114656

Malicious code in dactyl-remark-titan-yonder npm...

EUVD-2025-115144

Malicious code in commitlint-config-angular-global-dotenv-andromeda npm...

MAL-2025-144520 Malicious code in loglevel-run-script-cross-env-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5274bbe00f3f0fdea25171e1d9b6e8028893566b13e1a05f6160aae69d26a73b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146507 Malicious code in prettier-stylelint-enif-ophiuchus-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1c36c7e8318e9c03ae9ff620c9c5629c7f9fa3229ad0c5cc87694ef5eae4c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148402 Malicious code in supervisor-semantic-release-vortex-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6100947e9d3906df533eeb01f8f6999202033b601f432aea1b8763b8a6e819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145886 Malicious code in ora-jekyll-nodejs-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99ac7ea31cddaef6cbf34ea2f14a323c48b85e8610b6bcf49716db4c0d7a0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117415

Malicious code in empirical-amaranth-scorpion npm...

EUVD-2025-117000

Malicious code in visiting-black-caterpillar npm...

EUVD-2025-117307

Malicious code in inc-tomato-hoverfly npm...

EUVD-2025-117235

Malicious code in mechanical-amber-panther npm...

MAL-2025-139088 Malicious code in uniform-emerald-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845e445dfa88ebac32dc00958705f6a5b81989911b474171c0e9bd428ee3a21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117326

Malicious code in historical-yellow-walrus npm...

MAL-2025-138877 Malicious code in misleading-red-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd494484dfd8d481213be418ca55214d411a83c445c5ade866277dc5fe6a7537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...