MAL-2025-144192 Malicious code in koa-electron-reveal-md-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bc2848e7e40366ae4424bcf5d0323c1a8284f8c81db4e7d58b36a05f3f2ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147488 Malicious code in rollup-atlas-electron-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2af1ee5d3e4992b88a68bb2875b0a18c7257ad9df640d557993353350d1d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140380 Malicious code in capella-buffer-cypress-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77087077b5391b1a282a989a66379aa53a36663fdd0657e6717ea975080e744a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-jupiter-markdown-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e6c34d8ac0eb601de5dbe1d8ffd3e9486188b296e4dabf08a27344637a8159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111844

Malicious code in leda-eslint-leda-electron npm...

EUVD-2025-124618

Malicious code in nconf-alphard-electron-duplex npm...

EUVD-2025-120337

Malicious code in xanadu-electron-uninstall-zenobia npm...

EUVD-2025-113779

Malicious code in event-virgo-electron-blaze npm...

EUVD-2025-120874

Malicious code in ursa-electron-builder-helmet-foundation npm...

EUVD-2025-114193

Malicious code in electron-fornax-testcafe-centauri npm...

EUVD-2025-122189

Malicious code in scripts-got-electron-quark npm...

EUVD-2025-114189

Malicious code in electron-init-vulcan-wolf npm...

Malicious code in carpo-ignite-electron-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b7c30af3b3626ed4d0c18eee5818fbc188b087d67563e7607290b27fe3b630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114197

Malicious code in electron-eslint-aether-style-loader npm...

EUVD-2025-113052

Malicious code in grunt-electron-pulsar-kinetic npm...

EUVD-2025-113543

Malicious code in forever-init-hermes-electron npm...

EUVD-2025-120476

Malicious code in wezen-electron-scripts-blaze npm...

EUVD-2025-114390

Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script npm...

Malicious code in electron-semantic-ui-local-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8ae4d278c10bbf43bd015302566ba9e83c2ad8462dec439b9985e4afdb95ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-electron-request-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e539cb02c91ae228f455572ac5991dd7b11d2b868b70f0070586ea8fd26a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...