EUVD-2025-114289

Malicious code in duplex-sequelize-blitz-odin npm...

EUVD-2025-124198

Malicious code in oauth-blitz-nestjs-pipe npm...

EUVD-2025-116059

Malicious code in blitz-enceladus-hercules-spica npm...

EUVD-2025-116056

Malicious code in blitz-hyperion-leda-supervisor npm...

Malicious code in html-webpack-plugin-astro-blitz-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd60d4c15ba4743a5534b1eb8ea3d9e85b07a6b0c815b5ad417301435de30ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112381

Malicious code in iota-mira-blitz-celeste npm...

EUVD-2025-112343

Malicious code in jabbah-blitz-oauth-publish npm...

EUVD-2025-123755

Malicious code in phoebe-oauth-blitz-playwright npm...

EUVD-2025-116064

Malicious code in blitz-cosmiconfig-google-pino-pretty npm...

EUVD-2025-114716

Malicious code in cypress-blitz-typeorm-xenon npm...

EUVD-2025-115636

Malicious code in cassini-native-blitz-bunyan npm...

Malicious code in csrf-blitz-canopus-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ea798bd71576c5ed538e260d2e37cbe0d15a5ca6bc0c477fe465085fef3f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-electron-builder-blitz-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7509e20ca26b7c59996183c03c0c1f8e94eccd887ac91a3b488ba5d569464f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121876

Malicious code in socketio-draco-blitz-pavo npm...

Malicious code in blitz-pegasus-convict-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9efd04657104cfac73c4bf700c254831335ec418854cb990760a41449745b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147513 Malicious code in rollup-plugin-eridanus-blitz-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfa992f1714e127498f63f69dcf5e804c95c42071e1eaacffada5f691bb554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149466 Malicious code in wezen-redis-protractor-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2bc1e5ca6a049543fd24582fa1c4ba546cf8bd1e58763bb26845e8445f48084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144066 Malicious code in jupiter-wasat-blitz-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9636ce05fea538ac7059065ef9729dccfdc9cbf9fce39f7ae482e360c11bbc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143770 Malicious code in jabbah-blitz-oauth-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d945e0902b08e77257713b7316b3c50f0ce3c87d1e8804b22212a53021f2df88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144446 Malicious code in lint-staged-auth0-blitz-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c67138ee808692160a48ef7c74837cf18dd944b8ded69410c71f20c4277864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...