EUVD-2025-114929

Malicious code in cosmiconfig-firebase-warp-subscription npm...

Malicious code in geckodriver-ceres-celeste-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952704ef7609dad642d9aa825a3fe083c766943a6dfa24ad1f0f7e2f82789bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111970

Malicious code in kaus-firebase-jabbah-bellatrix npm...

EUVD-2025-113605

Malicious code in firebase-optimize-css-assets-webpack-plugin-csv-superagent npm...

EUVD-2025-111148

Malicious code in middleware-vulcan-taurus-firebase npm...

EUVD-2025-113613

Malicious code in firebase-frontend-apollo-perseus npm...

EUVD-2025-120066

Malicious code in zenobia-elara-mongoose-firebase npm...

EUVD-2025-113612

Malicious code in firebase-google-castor-standard npm...

Malicious code in firebase-bootstrap-xenon-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d3d1a15b135e8c44460a7dd13e05812078c6c8c9f084b23bc476a527c63226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123386

Malicious code in private-norma-firebase-pipe npm...

MAL-2025-142489 Malicious code in firebase-charon-node-config-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b995051a7142a276f04ec88281667d77e5e1ef909b5dc5770fe7f2d136fe09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123140

Malicious code in publish-epimetheus-redis-firebase npm...

Malicious code in loopback-firebase-postgres-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2789696425e4ec276c93faea29470a11265e41a4117bcdbc14f88a208240a63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112912

Malicious code in heka-apex-firebase-hyperion npm...

EUVD-2025-122258

Malicious code in sass-loader-cors-forever-firebase npm...

Malicious code in cosmiconfig-firebase-warp-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142499 Malicious code in firebase-google-castor-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c35d855c4037261cc0e67a28f5041d8ad7486426f5f63b1215b4d1954ca699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113616

Malicious code in firebase-eleventy-protractor-vortex npm...

EUVD-2025-111509

Malicious code in lyra-elara-mongodb-firebase npm...

MAL-2025-142492 Malicious code in firebase-cressida-commitlint-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46504f4252ff87ca260f5be757ce7ecaa3594bf829bd535705879fe64ba14f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...