Malicious code in firebase-mini-css-extract-plugin-buffer-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2507e2bca64e33f699252a47bc05ebba3fc5ea3681ca06aa4a5a418b1e064fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120756

Malicious code in virgo-vega-zephyr-firebase npm...

EUVD-2025-113595

Malicious code in firebase-tailwindcss-pegasus-json npm...

EUVD-2025-113611

Malicious code in firebase-io-webdriverio-react-bootstrap npm...

EUVD-2025-111273

Malicious code in mensa-apollo-firebase-lint-staged npm...

EUVD-2025-113601

Malicious code in firebase-relay-winston-webdriverio npm...

EUVD-2025-122795

Malicious code in registry-firebase-less-loader-subscription npm...

EUVD-2025-112968

Malicious code in halley-grunt-firebase-nebula npm...

EUVD-2025-115058

Malicious code in configstore-firebase-dotenv-parse-variables-auth npm...

EUVD-2025-124885

Malicious code in miranda-firebase-non-blocking-cygnus npm...

EUVD-2025-124766

Malicious code in mongoose-firebase-local-uglify-js npm...

EUVD-2025-113409

Malicious code in frontend-firebase-websockets-ursa npm...

MAL-2025-141657 Malicious code in docusaurus-cosmiconfig-fomalhaut-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48320ffdb95d1b543c27168dccd5a5eb028beb17f1215e1de83ec2140b407d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148945 Malicious code in umbriel-orbit-firebase-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63d918694d1ec06ca3636e0c9f9bd1adacaa73c740b5a0878601dfcade48b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-ursa-semantic-ui-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d87bbc1741065a631473700c3231b6c156699ec07fc6eb8220040d60406afa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113606

Malicious code in firebase-mini-css-extract-plugin-buffer-kinetic npm...

EUVD-2025-115518

Malicious code in chai-firebase-koa-wezen npm...

Malicious code in polaris-transform-firebase-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91201b5cfb0d545ae12aa908cc7d5b24f7c6833ace2ac82fb6c44e9dce3b5bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-grunt-firebase-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5e454e8b008901ff203e87ca9d360f5d4997b95763ed04d15c985c2691ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144131 Malicious code in kastra-run-script-firebase-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc401c10920d96d579d2722526875bac5f60943ac975fdf0410ecc87dc3389e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...