EUVD-2025-178560

Malicious code in helmet-blitz-izar-update npm...

Malicious code in passport-scripts-blitz-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df65c0c8e48693fe233a79a8411bde00985485c82e5b8bcdd73ed19eb6c312b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180022

Malicious code in blitz-nuxtjs-cosmicray-paleoceanography npm...

EUVD-2025-175445

Malicious code in yildun-blitz-miranda-accretion npm...

EUVD-2025-176934

Malicious code in public-perseus-zenith-blitz npm...

EUVD-2025-177568

Malicious code in node-sass-blitz-paleobotany-decoherence npm...

EUVD-2025-178889

Malicious code in firebase-selenology-blitz-eleventy npm...

EUVD-2025-180026

Malicious code in blitz-eslint-plugin-csrf-indus npm...

EUVD-2025-178386

Malicious code in install-enif-blitz-supervisor npm...

EUVD-2025-177441

Malicious code in ophiuchus-europa-charon-blitz npm...

EUVD-2025-179741

Malicious code in child-process-blitz-spawn-wasat npm...

EUVD-2025-180023

Malicious code in blitz-materialize-link-lint-staged npm...

MAL-2025-186993 Malicious code in firebase-selenology-blitz-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba84248994554254847bbbe7d4d7c2dffadaba57bdad95b53540b7220944baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186748 Malicious code in enif-blitz-selenium-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6263d90a50f469b364498e2b135964186baddc756040588a3c53724888fa7b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177799

Malicious code in miranda-postcss-blitz-module npm...

EUVD-2025-177985

Malicious code in magellan-augmentedreality-webdriver-mocha-blitz npm...

MAL-2025-188580 Malicious code in passport-scripts-blitz-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df65c0c8e48693fe233a79a8411bde00985485c82e5b8bcdd73ed19eb6c312b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186811 Malicious code in eridanus-paleoceanography-blitz-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb0760eec369a6a11d2cab8c3756d2a182fb378a1df24edce74a41659dbbafc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186154 Malicious code in cladistics-crust-blitz-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c316f4e58246fa52759b2c006660c1ca9ee997f2706fb365c7d763fa3baf2b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185558 Malicious code in ariel-blitz-rocket-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54cb285d99f4b49e9979cd77120e8d94e6e4991534997b5ca1d327e51aa6b78c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...