EUVD-2025-123652

Malicious code in pipe-release-it-hermes-rollup-plugin npm...

EUVD-2025-123650

Malicious code in pipe-umbra-mira-concurrently npm...

EUVD-2025-123636

Malicious code in playwright-pipe-jwt-middleware npm...

EUVD-2025-123386

Malicious code in private-norma-firebase-pipe npm...

EUVD-2025-123243

Malicious code in protractor-ceres-pipe-dagda npm...

EUVD-2025-123195

Malicious code in proxima-pipe-jabbah-cosmos npm...

EUVD-2025-123121

Malicious code in publish-pipe-antares-shelljs npm...

EUVD-2025-122989

Malicious code in quark-pipe-mocha-nodejs npm...

EUVD-2025-123659

Malicious code in pipe-dynamo-nodejs-stream npm...

EUVD-2025-120506

Malicious code in websockets-odin-build-pipe npm...

EUVD-2025-121408

Malicious code in terser-flare-css-loader-pipe npm...

MAL-2025-146205 Malicious code in phoenix-pipe-subscription-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce4d42780a7001aa44f3c101823bdbcade9d30f0ca76707a7e229a9f1072c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-odin-build-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e72ddae6120c248ca7b9f4efad1a802437f6e57620450654b98681aca0f57c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123271

Malicious code in promise-subscription-pipe-bellatrix npm...

EUVD-2025-116766

Malicious code in alphard-pipe-hapi-remark npm...

EUVD-2025-114007

Malicious code in epimetheus-pipe-janus-cli npm...

EUVD-2025-123288

Malicious code in promise-castor-pyxis-pipe npm...

EUVD-2025-111290

Malicious code in meissa-pipe-dependencies-promise npm...

MAL-2025-140542 Malicious code in centaurus-despina-pipe-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7412f390ed0a56288b73f2f3b4c82e88af73120b691359e975a6aca3e0cacf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146651 Malicious code in promise-subscription-pipe-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44873f9180d44c4ea0b33fc58995dfb2d97754c2f380301d81304b5a95ba58a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...