EUVD-2025-124848

Malicious code in mocha-chariklo-callback-pulsar npm...

EUVD-2025-115667

Malicious code in carpo-frontend-callback-gacrux npm...

Malicious code in callback-apollo-forever-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7996edf836737ab7f467291745cf1804def8903044963d1c9e7971d8f0e64cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123779

Malicious code in phoebe-callback-javascript-sequelize npm...

EUVD-2025-115672

Malicious code in carpo-centauri-commitlint-config-angular-callback npm...

EUVD-2025-120247

Malicious code in xenos-magellan-callback-dotenv npm...

EUVD-2025-121147

Malicious code in transport-commitlint-callback-andromeda npm...

EUVD-2025-113507

Malicious code in fornax-airbnb-callback-stream npm...

EUVD-2025-114207

Malicious code in electron-builder-gridsome-callback-aldebaran npm...

MAL-2025-147928 Malicious code in shelljs-sedna-kaus-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bd92185d5df059e6ea16e930861c0940b5e505fc65388e18f02aa9ea6e53dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113386

Malicious code in fusion-callback-soap-markdownlint npm...

EUVD-2025-115021

Malicious code in convict-rehype-callback-npm npm...

EUVD-2025-115796

Malicious code in callback-request-server-node-config npm...

EUVD-2025-122579

Malicious code in rest-command-callback-command npm...

MAL-2025-149132 Malicious code in version-callback-husky-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8176d823b539f44960e3f001e364010b73dbcdcb7449320d72a3472268eb79d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-callback-lacerta-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b83b3a3514c3342e03ae6ef7c003766fd44a1062721d488bf938e4f4a48224c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149589 Malicious code in xanadu-callback-request-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cf5680828ccf264b0c7c676df6028edd1e2c4f2e5ca2153794fe92a09f8f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141061 Malicious code in configstore-publish-callback-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbc0693eafa04b8a94047bef25c9cc975ce1f01682076e624ca0e6650756e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146142 Malicious code in phoebe-callback-javascript-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863b7bdace3d43c148c9ec83856b8f909c3780ed176684c3d48c0716917f78d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145070 Malicious code in mocha-chariklo-callback-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3aefe7e0ced759fcb278ff76c3e7e7bfaa86bfa349f129514e73a76812713f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...