EUVD-2025-121018

Malicious code in ultra-stream-cli-lynx npm...

MAL-2025-140650 Malicious code in chalk-miranda-stream-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c49e37c6859cc4ea8aaa71c43a84df6a1e639a482bc71eac042856a46b547299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121597

Malicious code in stream-phoebe-adonis-promise npm...

EUVD-2025-121608

Malicious code in stream-ganymede-semantic-ui-antares npm...

Malicious code in atlas-mini-css-extract-plugin-equinox-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404eaf3881cfa0b5b7b50fc02a65725729afb42926f6345a7dedfe0f35627d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116909

Malicious code in achernar-charon-triton-stream npm...

EUVD-2025-116886

Malicious code in adonis-rest-stream-non-blocking npm...

MAL-2025-142817 Malicious code in ganymede-prompts-winston-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d922a8b575251ccd228020bd96d9fc1ecd073d80ad488afda156f36546484946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115540

Malicious code in ceres-helmet-wezen-stream npm...

EUVD-2025-121614

Malicious code in stream-bunyan-selenium-fornax npm...

Malicious code in vuetify-puppeteer-stream-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4303bb98a1d550e8a4711121441236381921c720fac30b199e2d777750f88890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-odin-start-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db7425d137324f44c522d980f0e97d5761901d2847c2349c5a0b5321bb8f47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148312 Malicious code in stream-chalk-elara-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e8742ef7707e771c8ceaf7750f9e26d84d6f5e2fa92e9bf32fdaa0178bef63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-gulp-stream-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce8a4d9de37e9592ba9e3c891cf04f83429c155a22194a21fdf1bb9a7af61ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116792

Malicious code in algol-stream-node-config-enif npm...

EUVD-2025-111836

Malicious code in leda-javascript-stream-husky npm...

EUVD-2025-112501

Malicious code in ini-xenos-stream-webdriverio npm...

EUVD-2025-120246

Malicious code in xenos-mongoose-stream-fornax npm...

EUVD-2025-121610

Malicious code in stream-fornax-capella-public npm...

Malicious code in xenon-oauth-framework-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dce1782e99ecf2a9a1ac060d68897c127bf998539a101ddbcb4e03d4c4e560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...