EUVD-2025-123930

Malicious code in pavo-backend-neptune-semantic-release npm...

Malicious code in lacerta-backend-soap-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce45b105ded3fdee03065058388a88b616fc7fc15a7c590d40f9b00cc2169f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116223

Malicious code in backend-build-dorado-antares npm...

EUVD-2025-116220

Malicious code in backend-configstore-node-sass-firebase npm...

EUVD-2025-121275

Malicious code in thuban-graphql-backend-jupiter npm...

EUVD-2025-111833

Malicious code in leda-mini-css-extract-plugin-backend-radiant npm...

EUVD-2025-112150

Malicious code in json-backend-cluster-webdriverio npm...

EUVD-2025-111490

Malicious code in magellan-cache-backend-halley npm...

EUVD-2025-116211

Malicious code in backend-mongodb-pino-pretty-grus npm...

EUVD-2025-116213

Malicious code in backend-hyperion-nightmare-pipe npm...

EUVD-2025-120321

Malicious code in xanadu-server-backend-google npm...

EUVD-2025-112678

Malicious code in hydra-bellatrix-backend-sadr npm...

MAL-2025-146017 Malicious code in pegasus-backend-enif-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e142535251d34119d764a5255f77afd40a8779a049b56f1f864dcd4f0cc9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144109 Malicious code in karma-gridsome-backend-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310d0539043ad82350363d64d301dab21bc3058b5ed8f2b8c40789257f6e6992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142956 Malicious code in google-backend-lyra-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b28cb62fe2a152557a0284558db91baf5657ae5209dfe3be3c536704defb5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124493

Malicious code in nightmare-backend-babel-leda npm...

EUVD-2025-116206

Malicious code in backend-ursa-achernar-react-bootstrap npm...

MAL-2025-149090 Malicious code in vega-gatsby-backend-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef9239b9a48a8b8028f1bb79e1822e9bce3d82bdeba0246f6ac3e17e3a88318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139898 Malicious code in backend-wasat-ceres-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78977fc84c2e7c36ed3f9a84b4d2226faeeb53aeda92309a9ebf36bcdb7a06ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144614 Malicious code in lyra-phoebe-backend-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2214bbc2a0be5e2df1f0fc62f22f1d89844d530568150a57620e494ac832e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...