Malicious code in test-callback-airbnb-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131803de6486f41f40a8396879555f59e02c4c4848ab5135eea1aeaa79c94ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113585

Malicious code in flare-grunt-sass-loader-callback npm...

EUVD-2025-121488

Malicious code in tailwindcss-callback-andromeda-umbra npm...

EUVD-2025-112553

Malicious code in indus-callback-achernar-dorado npm...

EUVD-2025-115799

Malicious code in callback-process-upgrade-auth npm...

EUVD-2025-122506

Malicious code in reveal-md-mdx-geckodriver-callback npm...

EUVD-2025-120257

Malicious code in xenos-cypress-ursa-callback npm...

EUVD-2025-115792

Malicious code in callback-run-script-html-webpack-plugin-server npm...

EUVD-2025-122479

Malicious code in rimraf-arcturus-callback-meissa npm...

EUVD-2025-115800

Malicious code in callback-private-tool-dotenv-safe npm...

EUVD-2025-115812

Malicious code in callback-apollo-forever-html-webpack-plugin npm...

Malicious code in dagda-castor-xo-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423da8885f6bb0609f244a9e0ff6b0ccfa187e1af076268693e93b0c2bf6a404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122906

Malicious code in radiant-mira-cypress-callback npm...

Malicious code in got-rocket-build-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028b8aa4f6185b93d879053833468fd2cc925423325abe587d94abab54db54f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124150

Malicious code in octans-hyperion-callback-kaus npm...

EUVD-2025-112631

Malicious code in hyperion-janus-mutation-callback npm...

EUVD-2025-120534

Malicious code in webpack-dotenv-upgrade-callback npm...

MAL-2025-147928 Malicious code in shelljs-sedna-kaus-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bd92185d5df059e6ea16e930861c0940b5e505fc65388e18f02aa9ea6e53dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145070 Malicious code in mocha-chariklo-callback-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3aefe7e0ced759fcb278ff76c3e7e7bfaa86bfa349f129514e73a76812713f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140541 Malicious code in centaurus-bootstrap-callback-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7969750400aaf0b8947f7695420d28f460891a0d6b84261f1405f84b7010400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...