EUVD-2025-113623

Malicious code in firebase-bootstrap-xenon-mira npm...

EUVD-2025-112303

Malicious code in janus-firebase-postcss-loader-cygnus npm...

MAL-2025-142517 Malicious code in firebase-tethys-lacerta-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d5ff0f33b8c4e3d791473618cc4821b1a690ac34b74c6f64375aa339435f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113593

Malicious code in firebase-webdriver-manager-vega-neptune npm...

EUVD-2025-111982

Malicious code in kastra-run-script-firebase-blaze npm...

Malicious code in firebase-relay-winston-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8df2c7171ca9261aad999cabc9cab7d7e3eb476ecbee2445af9054a0299af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-middleware-websockets-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965718b2e69e8cd0837618529f0dff3b16fdbfef7b4cc2473c9574fa1aed806c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124552

Malicious code in neptune-morgan-firebase-aquarius npm...

EUVD-2025-113620

Malicious code in firebase-cordelia-ignite-cosmiconfig npm...

EUVD-2025-121631

Malicious code in stop-firebase-mira-ophiuchus npm...

MAL-2025-142494 Malicious code in firebase-dotenv-jekyll-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7250fd1d98f38675d88943be502ddde7a74890f2a44a5886ad8996430edd8f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140962 Malicious code in commitlint-config-angular-firebase-node-config-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f2862c90083d0e858dbc19eddcb13d4246beb63decd5dd5511dc3e4d9f3fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-spinner-firebase-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d50d2148eb02e8dee26102481118cc6dce36328fb9fb1b5c7f2a72b52d384d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116248

Malicious code in babel-dorado-firebase-readable npm...

EUVD-2025-116174

Malicious code in bellatrix-centaurus-toml-firebase npm...

EUVD-2025-112304

Malicious code in janus-firebase-mdx-supervisor npm...

EUVD-2025-115146

Malicious code in commitlint-config-angular-firebase-node-config-wezen npm...

Malicious code in firebase-dotenv-jekyll-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7250fd1d98f38675d88943be502ddde7a74890f2a44a5886ad8996430edd8f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142503 Malicious code in firebase-meissa-loopback-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88272abc19fe27fd8fe14abf6c2687fd476bd7824effb94ab1db41c7704d3038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143144 Malicious code in halley-grunt-firebase-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5e454e8b008901ff203e87ca9d360f5d4997b95763ed04d15c985c2691ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...