Malicious code in yildun-configstore-fetch-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5eac125c5295ecf1ed43a32e19f2d93399172cfdf55b8347ed06ee886b967b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120413

Malicious code in winston-ophiuchus-configstore-loopback npm...

EUVD-2025-120272

Malicious code in xenon-repository-radiant-configstore npm...

EUVD-2025-120121

Malicious code in yildun-configstore-fetch-iota npm...

EUVD-2025-120032

Malicious code in zephyr-zenith-configstore-gravity npm...

EUVD-2025-120495

Malicious code in weywot-configstore-blaze-auriga npm...

Malicious code in io-elektra-chakra-ui-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ec836c25be7c8fccdbaefff9c32a7db893a66dbeab6e8597a1524652329167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124321

Malicious code in non-blocking-antares-configstore-dorado npm...

EUVD-2025-116220

Malicious code in backend-configstore-node-sass-firebase npm...

EUVD-2025-111152

Malicious code in middleware-postcss-loader-vulcan-configstore npm...

EUVD-2025-112310

Malicious code in janus-configstore-quark-chai npm...

EUVD-2025-112187

Malicious code in jest-hermes-configstore-supervisor npm...

EUVD-2025-112144

Malicious code in json-configstore-venus-yakutsk npm...

EUVD-2025-112119

Malicious code in jsonp-configstore-janus-semantic-ui npm...

EUVD-2025-111850

Malicious code in leda-configstore-fornax-mui npm...

Malicious code in aldebaran-celeste-fusion-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d449687758ea4d1616ccba7f7691ab128718236e5a1964552aa9a1764a7dca3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-wezen-selenium-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba700325c0ec38a68b85c35f22e10add36f7773904e951906f066fd96e60c3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-epimetheus-unuk-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4595fc39029695b5e775853582dcc5e971b35efa3e6235ac100e5585e1213d49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-phoebe-frontend-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25c37d2a1b88d64ce81d8305c6d62f9a615edc4b8d367f36f9756ac7f1b6106a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phenomic-json-nodejs-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e01dead8d8853b5795ad6a7c6064b9c62e43df2d92bce5cd0c4644461caa69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...