EUVD-2025-115064

Malicious code in configstore-apollo-mira-ariel npm...

EUVD-2025-115049

Malicious code in configstore-prettier-css-loader-neptune npm...

EUVD-2025-121744

Malicious code in spica-terser-configstore-taurus npm...

Malicious code in janus-phoebe-frontend-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25c37d2a1b88d64ce81d8305c6d62f9a615edc4b8d367f36f9756ac7f1b6106a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112884

Malicious code in helios-configstore-orbit-meteor npm...

EUVD-2025-112419

Malicious code in io-elektra-chakra-ui-configstore npm...

EUVD-2025-120108

Malicious code in yildun-terser-webpack-plugin-configstore-achernar npm...

EUVD-2025-112751

Malicious code in html-webpack-plugin-epimetheus-unuk-configstore npm...

EUVD-2025-122282

Malicious code in sails-configstore-umbriel-magellan npm...

EUVD-2025-115060

Malicious code in configstore-enceladus-reveal-md-semantic-ui npm...

Malicious code in loopback-puppeteer-orbit-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb39e2620d3390231bb1f11d856b5d83153e0517c509f97d497defe7de83a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148189 Malicious code in spinner-configstore-lynx-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ae63f9bdf59bd6c85aee247ecc80ee241e3e6ca01ddf21e3b29e53c823f97d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146710 Malicious code in proxima-configstore-postgres-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780dcbaec41c4e20250e39de2cf359cc95f8977765f504674d4df2184b60f365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-repository-radiant-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46799f01c1add7c954c79d53f8c463356b37c7c7e01ecf694e3104e98508858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115053

Malicious code in configstore-koa-auriga-ariel npm...

MAL-2025-142712 Malicious code in frontend-nuxtjs-configstore-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed224f2d4c4313c0bad8649b36a558e5a593b3dbbab706401a7a9e60a6208de5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140559 Malicious code in ceres-configstore-jwt-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b37125288f59175aae4e6dc61e0ccea7b4160d5711e3420d95b347159ba37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141061 Malicious code in configstore-publish-callback-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbc0693eafa04b8a94047bef25c9cc975ce1f01682076e624ca0e6650756e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149811 Malicious code in yildun-configstore-fetch-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5eac125c5295ecf1ed43a32e19f2d93399172cfdf55b8347ed06ee886b967b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141048 Malicious code in configstore-dotenv-safe-chakra-ui-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f2f08d540754dbc9b32830614d963586b1c8b2127b590941f2f7003486f5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...