EUVD-2025-120310

Malicious code in xanthus-cors-development-mongodb npm...

EUVD-2025-124749

Malicious code in morgan-betelgeuse-development-indus npm...

Malicious code in await-dynamo-europa-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d6d85e8e7408451d3696998f145b53a266be50a39fc04a312b692cb078ef01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143314 Malicious code in hermes-development-browserify-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603d2d8cb661d4bfb2a2f0cae3ab47d384a2ec9b7bd2980e68a0ee846b0d175c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121900

Malicious code in soap-lacerta-development-element-ui npm...

EUVD-2025-121734

Malicious code in spinner-development-cassini-umbriel npm...

MAL-2025-143315 Malicious code in hermes-development-virgo-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9ebfa206b435c81a56d67d919dc4e28ddfda901b05abe2419b067e8de16f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122909

Malicious code in radiant-development-eslint-plugin-nodejs npm...

EUVD-2025-124327

Malicious code in nodemon-scorpius-ignite-development npm...

EUVD-2025-115588

Malicious code in celeste-pavo-sagitta-development npm...

EUVD-2025-115059

Malicious code in configstore-enif-development-altair npm...

MAL-2025-139797 Malicious code in await-dynamo-europa-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d6d85e8e7408451d3696998f145b53a266be50a39fc04a312b692cb078ef01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141748 Malicious code in dotenv-safe-development-command-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c16cfd842e8cb52469e8ea8f152f3e7626745060a732985a6a98d9c59f8271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146370 Malicious code in polaris-spectron-webdriver-development-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b97c61b120b0d11484dbe757f30da970c4faf2ded6606a69162f1d6f7b2213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148467 Malicious code in taurus-development-sirius-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be8b5020ffe59b7b9afc50b4ca06dc749d7ade12a8b455458bca24118978902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112797

Malicious code in hermes-development-virgo-promise npm...

EUVD-2025-116250

Malicious code in babel-development-gatsby-aldebaran npm...

EUVD-2025-116449

Malicious code in atlas-pyxis-prompts-development npm...

Malicious code in configstore-enif-development-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18867f5616affb9421d74ecd880425debcb7b7e0fc1670211003ddec8dc395d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141625 Malicious code in development-mui-avior-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847441eefbf7f87609313b98589bff9e11ed701a7d8cef315a07e5b6dc2f7cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...