EUVD-2025-120756

Malicious code in virgo-vega-zephyr-firebase npm...

EUVD-2025-113615

Malicious code in firebase-epimetheus-request-antares npm...

EUVD-2025-113618

Malicious code in firebase-docusaurus-soap-fork npm...

EUVD-2025-122699

Malicious code in release-it-hyperion-firebase-halley npm...

Malicious code in firebase-equinox-subscription-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86eb7bcb8fb5b305c8955a209837823b518246f954d7f8092b05bf6df8cb27e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111148

Malicious code in middleware-vulcan-taurus-firebase npm...

EUVD-2025-121906

Malicious code in soap-firebase-nightwatch-publish npm...

Malicious code in vuepress-rest-firebase-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d96054190a7de9344d8f480eb9efd89f962f1ecb598bf536198426daca3994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123386

Malicious code in private-norma-firebase-pipe npm...

Malicious code in hermes-child-process-event-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca93f163efe1c3e5aef570b5278b355cc483a6872c9f8921df0fa1197fa4f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113600

Malicious code in firebase-rigel-fornax-ini npm...

EUVD-2025-113866

Malicious code in eslint-plugin-thuban-firebase-centauri npm...

EUVD-2025-111273

Malicious code in mensa-apollo-firebase-lint-staged npm...

EUVD-2025-112445

Malicious code in install-bellatrix-firebase-webpack npm...

Malicious code in geckodriver-ceres-celeste-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952704ef7609dad642d9aa825a3fe083c766943a6dfa24ad1f0f7e2f82789bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-firebase-websockets-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 658595abdf701a1efbf2d67916d95653b525ecf14cbc26919e962c9b88b76554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-bootstrap-xenon-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d3d1a15b135e8c44460a7dd13e05812078c6c8c9f084b23bc476a527c63226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-eleventy-protractor-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0798504104232bd981669802bf8d352aef1ac84de841bfc470416a94c4a6512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113605

Malicious code in firebase-optimize-css-assets-webpack-plugin-csv-superagent npm...

EUVD-2025-120263

Malicious code in xenon-ursa-semantic-ui-firebase npm...