EUVD-2025-115299

Malicious code in cli-rimraf-callback-exec npm...

Malicious code in cli-celeste-cors-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7492e3952d9434eafd92a7f6c3705c199c7ed56c4ee9f13f1a3fbdeccbf70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124391

Malicious code in node-sass-cli-charon-zenith npm...

EUVD-2025-122389

Malicious code in rollup-spectron-acamar-cli npm...

Malicious code in playwright-cli-antares-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62941a3085c080ce17c8f0e51fd2b6b90ebbdbb7d4177709b5c4bdf44692b987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115321

Malicious code in cli-browserify-mini-css-extract-plugin-frontend npm...

EUVD-2025-113250

Malicious code in geckodriver-css-loader-transform-cli npm...

Malicious code in colors-corvus-postgres-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2eb7eafb397099447d7894757e36ecfbe2dfe1fc171de2c28d818bd4b75bfaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115315

Malicious code in cli-dagda-heka-config npm...

EUVD-2025-124381

Malicious code in node-sass-gacrux-venus-cli npm...

EUVD-2025-115298

Malicious code in cli-sedna-xo-tool npm...

EUVD-2025-122129

Malicious code in sedna-socketio-cli-scorpius npm...

EUVD-2025-123864

Malicious code in pegasus-superagent-await-cli npm...

Malicious code in hyperion-scorpius-xerxes-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5fcf3ea9fcafd2dcd691e048a33ae8872e48097d9d1a615d8762e7bbaec02d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140813 Malicious code in cli-ursa-lyra-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404b7635e00676f5a1f01eb0daf4d7a14be165f5c23502d43264abd963cd7c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141539 Malicious code in deneb-cli-process-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456e0252c4e2a30003d54a2df3e186700c4398ac5252d762bff1e11127186e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146184 Malicious code in phoebe-style-loader-cli-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e04ce2c712bbc25c67643867a15140421117b4114f9341aa70a921105a3617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149894 Malicious code in zephyr-resolvers-cli-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c010e7aa179a021023ded32a1531ca34e4cd286c20d4e8b50aca8afa148a3ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120800

Malicious code in version-achernar-nightwatch-cli npm...

Malicious code in aether-cli-ariel-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cafe7413479fb9fed550e2556cbdbe777ac1cf62089cac36a45b27a23e59ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...