Malicious code in cors-spinner-firebase-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d50d2148eb02e8dee26102481118cc6dce36328fb9fb1b5c7f2a72b52d384d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123434

Malicious code in prettier-plugin-markdown-miranda-firebase-ariel npm...

EUVD-2025-115146

Malicious code in commitlint-config-angular-firebase-node-config-wezen npm...

EUVD-2025-120336

Malicious code in xanadu-firebase-hydra-avior npm...

EUVD-2025-115518

Malicious code in chai-firebase-koa-wezen npm...

EUVD-2025-113623

Malicious code in firebase-bootstrap-xenon-mira npm...

EUVD-2025-113604

Malicious code in firebase-playwright-comet-nodemon npm...

EUVD-2025-113611

Malicious code in firebase-io-webdriverio-react-bootstrap npm...

Malicious code in firebase-epimetheus-request-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c721b5d84b5da0745603263ee7cfaedc0a0037ad7034d14d12db5a205122739f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124599

Malicious code in nconf-jekyll-firebase-prettier npm...

EUVD-2025-112380

Malicious code in iota-nestjs-firebase-rest npm...

EUVD-2025-116174

Malicious code in bellatrix-centaurus-toml-firebase npm...

EUVD-2025-112968

Malicious code in halley-grunt-firebase-nebula npm...

Malicious code in xenon-ursa-semantic-ui-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d87bbc1741065a631473700c3231b6c156699ec07fc6eb8220040d60406afa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111982

Malicious code in kastra-run-script-firebase-blaze npm...

EUVD-2025-116248

Malicious code in babel-dorado-firebase-readable npm...

MAL-2025-142509 Malicious code in firebase-prompts-ophiuchus-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd762064fe507b2ea3c8881ea3d2ed43a20683cebadab4ebd9480060fda0a087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-relay-winston-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8df2c7171ca9261aad999cabc9cab7d7e3eb476ecbee2445af9054a0299af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-grunt-firebase-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5e454e8b008901ff203e87ca9d360f5d4997b95763ed04d15c985c2691ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142497 Malicious code in firebase-equinox-subscription-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86eb7bcb8fb5b305c8955a209837823b518246f954d7f8092b05bf6df8cb27e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...