EUVD-2025-114813

Malicious code in csrf-rollup-plugin-halley-lynx npm...

EUVD-2025-122163

Malicious code in sedna-cli-csrf-telesto npm...

EUVD-2025-121907

Malicious code in soap-csrf-sync-nextjs npm...

EUVD-2025-114826

Malicious code in csrf-fornax-xanthus-auth npm...

Malicious code in ariel-octans-csrf-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad782e8410ebf0acd6ca7e645af374b1c97296fe8279c828a59984a30eb1e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-vega-leda-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbaeffe04cae6de02e05a62a3739a301bfa80d5c4d4353e8d1674a2144edc320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114811

Malicious code in csrf-uglify-js-library-procyon npm...

Malicious code in kronos-restart-csrf-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e758bf75f5a61e0c8abe19a6c4243b9f6aedf5a19fd8bb606ffe0d267c32861e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112170

Malicious code in jovian-csrf-javascript-gridsome npm...

EUVD-2025-113106

Malicious code in graphql-orbit-csrf-yaml npm...

EUVD-2025-114810

Malicious code in csrf-winston-koa-nextjs npm...

EUVD-2025-114815

Malicious code in csrf-process-janus-package npm...

EUVD-2025-111889

Malicious code in kronos-restart-csrf-jsonp npm...

EUVD-2025-124291

Malicious code in non-blocking-vega-jovian-csrf npm...

EUVD-2025-114812

Malicious code in csrf-sirius-webpack-iota npm...

EUVD-2025-112773

Malicious code in hexo-csrf-slides-install npm...

MAL-2025-143196 Malicious code in hapi-prompts-markdown-pdf-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70611763ec0820cf06f80352089a3d6edd38c7a1491891daf9f0bd9f35c623fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149126 Malicious code in venus-toml-google-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19275523c1ac90a3c78c796a3d6a693d61c37f1c6e132085aab050319a35dde7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142927 Malicious code in global-csrf-xml-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a669302077b44dbbcb3bdfd3d6456495a67dbcffacbdef50b03e2fbf92f2b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142251 Malicious code in eslint-terser-webpack-plugin-nightwatch-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d7c459fe1fbf66aec4fc51d75472c90fe2821ff50683d8de793bf04121a83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...