Malicious code in convict-cross-env-fornax-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3400ee48bb8e6820f883a6fbadd1dc8b8b946d5fc20c19fd0b0702614d2df39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114740

Malicious code in cygnus-html-webpack-plugin-convict-sagitta npm...

EUVD-2025-122080

Malicious code in semantic-ui-convict-centaurus-husky npm...

EUVD-2025-116145

Malicious code in bellatrix-spawn-iota-convict npm...

Malicious code in orbit-markdown-pdf-octans-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0641cc7aee43d97ec6273b6e03734f3d96d764db8cf8ace1375ac67e421705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145111 Malicious code in module-nestjs-convict-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0597fa9a588ae3af2a54589c51cad71f570903d12c726485ea45874f01d571b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116508

Malicious code in ariel-polaris-rimraf-convict npm...

EUVD-2025-114341

Malicious code in dotenv-safe-parcel-convict-umbriel npm...

EUVD-2025-122546

Malicious code in restart-convict-juno-envconfig npm...

EUVD-2025-115699

Malicious code in carina-draco-install-convict npm...

EUVD-2025-115039

Malicious code in convict-cross-env-fornax-buffer npm...

EUVD-2025-115020

Malicious code in convict-relay-docusaurus-bootstrap npm...

EUVD-2025-115040

Malicious code in convict-atlas-ophiuchus-prettier npm...

EUVD-2025-114989

Malicious code in cors-equinox-convict-rollup-plugin npm...

EUVD-2025-115019

Malicious code in convict-rollup-plugin-buffer-sagitta npm...

EUVD-2025-115364

Malicious code in child-process-altair-convict-dynamo npm...

EUVD-2025-121222

Malicious code in toml-convict-lyra-helios npm...

MAL-2025-141084 Malicious code in convict-promise-transform-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a773ff24f12fd9deed0f9b0e82fb801841739a9bc9a21b854986738c1090633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141086 Malicious code in convict-query-nodejs-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947879ab9208e82054fd505807da031763a35a0ff420bdf7e46e98c33eec225d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139217 Malicious code in adonis-sass-loader-eslint-config-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1227693d8b17d578c1c34349d603a818d74e794f02ca8a1c07433517135530db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...