EUVD-2025-123431

Malicious code in prettier-plugin-markdown-procyon-non-blocking-exec npm...

EUVD-2025-115118

Malicious code in commitlint-jovian-exec-figures npm...

EUVD-2025-113770

Malicious code in exec-fusion-backend-corvus npm...

EUVD-2025-122555

Malicious code in rest-sqlite-exec-hugo npm...

EUVD-2025-114143

Malicious code in element-ui-exec-magellan-aurora npm...

MAL-2025-139804 Malicious code in await-proxima-mui-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d650a20b5908dc81ddf5fe514abf51c8ed0990e33cfb1fe510b4db247ea4ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149232 Malicious code in vulcan-exec-foundation-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393418d75ebc2f776c24e86203957211190acf17666ab3c9cfeea66c745b963f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140809 Malicious code in cli-rimraf-callback-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507b5deb9e378a4729ae079af92904564d22a267bae8b21fe5e7db7342c1e2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148371 Malicious code in superagent-atlas-thuban-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e878b4e6fd11733f8146f15b3f2adb704edf92f18598b0e9acf12cafcb3a9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140990 Malicious code in commitlint-jovian-exec-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a83712f940d043472046dfe7c051ea32c09b485d15a401d1e980e1167464e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113767

Malicious code in exec-ignite-hermes-process npm...

MAL-2025-144247 Malicious code in lacerta-middleware-procyon-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1b28da3265a24a7bcce4680ed10ee0d5aa21f933a37897e5c22f5b5203a960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141684 Malicious code in dorado-chalk-canopus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9780f97be9dad27f3d893ac69914d86d4366e962fcb1202373b7f0fab22d148d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147158 Malicious code in regulus-spica-passport-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a713fe213ed9bf0e8d60873861b986fa6ae9d86a561fc57c525d5bae053da4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143204 Malicious code in heka-exec-terser-webpack-plugin-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459a8911d404ea550d39c9a03962c94d442f59f3731ba158658f93ea0e9d1729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142356 Malicious code in exec-nuxtjs-async-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0547138917a1647cd799533fb1a5d590a7076f852e032130c1b80b909a792139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146529 Malicious code in private-apex-async-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809989375fd7c4fee0ad26f02ee0690a7036ba01a3577306714bcb41ddf649ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146468 Malicious code in prettier-fornax-exec-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de39dbf074648170ab74202eeed10b390bf1cb8832895dfec891d1612bcc4879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139979 Malicious code in betelgeuse-exec-update-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e555950e15a7e2b4e020ff7b30c178cb7e9d44c348eb8310e6831db7125e83f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139280 Malicious code in aldebaran-grus-playwright-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e02caa4a0202f9fe74340d729f4014eb8e1fbf97483fdef1e9ccf1041ea252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...