EUVD-2025-120170

Malicious code in yakutsk-airbnb-hexo-elektra npm...

Malicious code in sails-aquarius-elektra-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a55c0fac4c3569449fdc116417d05fb97f310e65f036c7e35510fb8e9d4bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115117

Malicious code in commitlint-link-rigel-elektra npm...

EUVD-2025-116647

Malicious code in antd-gatsby-node-sass-elektra npm...

EUVD-2025-111689

Malicious code in link-solis-promise-elektra npm...

EUVD-2025-114174

Malicious code in elektra-aether-rocket-thuban npm...

Malicious code in io-elektra-chakra-ui-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ec836c25be7c8fccdbaefff9c32a7db893a66dbeab6e8597a1524652329167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149761 Malicious code in yakutsk-airbnb-hexo-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3d1200b450aaccf441f8e19782c2d285ed44b037d7fef865e763c46c7b7d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-meteor-slides-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ade6f541b404705505f9e2dcfc83465bea3aef4ee1280d3246806fdd04db9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-umbra-electron-builder-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862a2349ffda24c475fb6b50662ed3b2a243d7c9031ce530c284e46c5f71a68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-gravity-cache-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 622702e688f2fb8e40276dc4b844a58c5ad13b3b4ca30106511cad457fa7130d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114615

Malicious code in deimos-gravity-cache-elektra npm...

EUVD-2025-114793

Malicious code in css-loader-soap-elektra-andromeda npm...

EUVD-2025-113645

Malicious code in figures-elektra-server-buffer npm...

EUVD-2025-115339

Malicious code in chromedriver-elektra-halley-loopback npm...

EUVD-2025-124359

Malicious code in nodejs-elektra-perseus-apollo npm...

EUVD-2025-112220

Malicious code in javascript-triton-babel-elektra npm...

EUVD-2025-114170

Malicious code in elektra-comet-kaus-request npm...

EUVD-2025-114889

Malicious code in cosmos-sirius-elektra-eslint npm...

Malicious code in colors-elektra-hermes-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36783a474b043cdb1e111f0a4ff2ec93bf162f4492ff990caa669c4b82dced6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...