EUVD-2025-113603

Malicious code in firebase-process-sedna-node-sass npm...

EUVD-2025-111970

Malicious code in kaus-firebase-jabbah-bellatrix npm...

EUVD-2025-113771

Malicious code in exec-firebase-iota-changelog npm...

Malicious code in firebase-dotenv-jekyll-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7250fd1d98f38675d88943be502ddde7a74890f2a44a5886ad8996430edd8f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112303

Malicious code in janus-firebase-postcss-loader-cygnus npm...

EUVD-2025-122069

Malicious code in semantic-ui-perseus-firebase-cypress npm...

EUVD-2025-113941

Malicious code in eris-duplex-firebase-eslint-config npm...

EUVD-2025-112176

Malicious code in jest-venus-fetch-firebase npm...

MAL-2025-148945 Malicious code in umbriel-orbit-firebase-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63d918694d1ec06ca3636e0c9f9bd1adacaa73c740b5a0878601dfcade48b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142515 Malicious code in firebase-server-miranda-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb4a7fb178cd7eadc112d909aa87f187fb04dd8148d9afd9a0ff5227a5d61e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113608

Malicious code in firebase-meissa-loopback-event npm...

MAL-2025-140962 Malicious code in commitlint-config-angular-firebase-node-config-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f2862c90083d0e858dbc19eddcb13d4246beb63decd5dd5511dc3e4d9f3fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149668 Malicious code in xenon-ursa-semantic-ui-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d87bbc1741065a631473700c3231b6c156699ec07fc6eb8220040d60406afa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149199 Malicious code in vuepress-rest-firebase-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d96054190a7de9344d8f480eb9efd89f962f1ecb598bf536198426daca3994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113616

Malicious code in firebase-eleventy-protractor-vortex npm...

EUVD-2025-113596

Malicious code in firebase-server-miranda-jupiter npm...

Malicious code in cosmiconfig-firebase-warp-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124147

Malicious code in octans-mensa-public-firebase npm...

EUVD-2025-113303

Malicious code in ganymede-lyra-arcturus-firebase npm...

EUVD-2025-116518

Malicious code in ariel-cosmos-arcturus-firebase npm...