EUVD-2025-111745

Malicious code in levels-yaml-build-shelljs npm...

EUVD-2025-115920

Malicious code in build-figures-module-acamar npm...

EUVD-2025-111751

Malicious code in levels-slides-build-xanadu npm...

EUVD-2025-124492

Malicious code in nightmare-build-norma-pegasus npm...

MAL-2025-141984 Malicious code in element-ui-spinner-bootstrap-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955b49c0bd95c502fd03223c8164d7331c570f17e89327a7346c250f55ee2f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-publish-centaurus-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97fdf8cc707d1ad10e2072131e6414494e53de3f5aad8415866f852ad745ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140188 Malicious code in build-publish-centaurus-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97fdf8cc707d1ad10e2072131e6414494e53de3f5aad8415866f852ad745ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-figures-module-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ace4a46ede4b2472a3a7452145025518e5fa58a5d553c0f4d1cae8f61157b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-odin-build-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e72ddae6120c248ca7b9f4efad1a802437f6e57620450654b98681aca0f57c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122248

Malicious code in sass-loader-magellan-build-reveal-md npm...

MAL-2025-143650 Malicious code in inquirer-lacerta-build-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475e7d0078037660a995d748c438866f42b5e35f4eeedbfb1f11d0d005bb3ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122039

Malicious code in sequelize-version-build-thuban npm...

Malicious code in frontend-build-css-loader-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f3b812757c3e29f823e8d9b9e8e9f4a5b40ec2173f90d8a330a1d86980db6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-callback-build-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa451bc61732e3800480939f0e2c59aacea12ed0549347ad33424411dbe39b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-axios-build-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de1782855692574879b52f874525f81e799648d8226dcd053e2552dc17fcfb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114663

Malicious code in dactyl-lint-staged-achernar-build npm...

MAL-2025-140181 Malicious code in build-altair-winston-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24932c776e1ae81f75ee25cc117faa978fce6270eb11033b71b6a84b645c6608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115592

Malicious code in celeste-nebula-less-loader-build npm...

EUVD-2025-115842

Malicious code in cache-build-commitlint-leda npm...

MAL-2025-142699 Malicious code in frontend-build-css-loader-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f3b812757c3e29f823e8d9b9e8e9f4a5b40ec2173f90d8a330a1d86980db6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...