EUVD-2025-115045

Malicious code in configstore-semantic-ui-iota-google npm...

EUVD-2025-115056

Malicious code in configstore-gacrux-centauri-cassini npm...

MAL-2025-143310 Malicious code in hermes-configstore-eslint-plugin-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3bdc04af03af34bd15360b61efcf854164c41b3154458686a6e8af98453a21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143566 Malicious code in indus-hercules-configstore-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83c7c59ae73d562061dbf27cde47d80227afd7131763b615526a60ec5c807a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-configstore-remark-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06dda14679a98ebec10e2ad050d79ebedfb942dea17c3e772d9a36b935b88b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116219

Malicious code in backend-configstore-ultra-parcel npm...

MAL-2025-143228 Malicious code in helios-configstore-orbit-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3df2929912d909d21c9c5c9667a29fb56ea616c1d8cfbf3d46ad1dd457f1e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145812 Malicious code in ophiuchus-configstore-iota-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97cb6f533c684765ac7c1827d4186a08b8cb864ea4fe108ce60b4a231a9f0911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145655 Malicious code in nova-configstore-envconfig-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ce7ba149dfab81053af19e5fda3cd4e6ef2373a58b40e024f4b6e06cd32a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115048

Malicious code in configstore-publish-callback-atlas npm...

EUVD-2025-112310

Malicious code in janus-configstore-quark-chai npm...

EUVD-2025-112802

Malicious code in hermes-configstore-eslint-plugin-express npm...

EUVD-2025-115977

Malicious code in bootstrap-wezen-selenium-configstore npm...

EUVD-2025-113896

Malicious code in eslint-configstore-transform-zenith npm...

EUVD-2025-113547

Malicious code in forever-configstore-markdownlint-webdriver-mocha npm...

EUVD-2025-123212

Malicious code in proxima-configstore-postgres-altair npm...

EUVD-2025-115377

Malicious code in charon-polaris-socketio-configstore npm...

EUVD-2025-115050

Malicious code in configstore-playwright-charon-standard npm...

Malicious code in configstore-apollo-mira-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f886345bbcfc473d8d3b4a18ff79cbd8439b3bac331f5bdacfb2166336a495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-configstore-bellatrix-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84856589e5835a0225179325645e11cec438454e45f4e6c72aa2b05ad6a7d785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...