EUVD-2025-111863

Malicious code in lacerta-rest-mocha-foundation npm...

EUVD-2025-123703

Malicious code in pino-foundation-norma-lint npm...

EUVD-2025-123464

Malicious code in prettier-bootes-foundation-gacrux npm...

EUVD-2025-115090

Malicious code in config-commitlint-config-angular-foundation-spica npm...

Malicious code in jupiter-wasat-blitz-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9636ce05fea538ac7059065ef9729dccfdc9cbf9fce39f7ae482e360c11bbc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113210

Malicious code in gemini-less-loader-schema-foundation npm...

EUVD-2025-116215

Malicious code in backend-foundation-prettier-fornax npm...

Malicious code in deneb-warp-foundation-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2da07786b07f1080bf68eef9f1d567aa7e1c425ad990827531418dbb2973611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113843

Malicious code in europa-foundation-zephyr-betelgeuse npm...

EUVD-2025-112175

Malicious code in jest-vortex-ini-foundation npm...

Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393c86a40c20147d13ec71247ee073c845eddb0438bcca90cd59b24989b70662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-foundation-enceladus-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f8401d11f4b6874b1999bdf3f2ec8220a510a0e127d7d11a1535ebc1f3395e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112522

Malicious code in ini-forever-foundation-framework npm...

EUVD-2025-113916

Malicious code in eslint-config-carpo-wezen-foundation npm...

EUVD-2025-116224

Malicious code in backend-barnard-galaxy-foundation npm...

Malicious code in jest-vortex-ini-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57921d568b97d6d9305b1a5aa660dc2fc975b01045ac78e3fd2e0b5ed3a82d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121037

Malicious code in ultra-dynamo-foundation-install npm...

MAL-2025-145539 Malicious code in node-sass-foundation-helios-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa148084f3aa7bdcf939f75d7ed0963f845ceea2b4be00e210a62320dee30ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147612 Malicious code in sagitta-publish-npm-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c7fc955c277c3de9a6cc9a4bbef4982f2f62079dcec8f17b305ed1db8ba22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149641 Malicious code in xenon-ariel-foundation-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 154d686ffc4faf29ecd3c0b4334cde0d87fc570fce3cba8794a8fc683629e863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...