MAL-2025-143314 Malicious code in hermes-development-browserify-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603d2d8cb661d4bfb2a2f0cae3ab47d384a2ec9b7bd2980e68a0ee846b0d175c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-cordelia-framework-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb6b689160e4581ea532cb8229eedfe2bc5bdfad888df29d6e500d0aaa36077a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114590

Malicious code in delphinus-io-aldebaran-framework npm...

EUVD-2025-113427

Malicious code in framework-magellan-mocha-lynx npm...

Malicious code in loopback-framework-loopback-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7b27e27c7246783d05331bd95e459820ecd9975b3cb5f76e1d50febbf6d07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111914

Malicious code in koa-pipe-dorado-adonis npm...

Malicious code in framework-astro-library-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef35db8d4a04cadcdd6e1d033c10b92183e380161dd5773465e45152621bf70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113425

Malicious code in framework-mysql-regulus-element-ui npm...

EUVD-2025-113540

Malicious code in forever-phoebe-framework-cz-conventional-changelog npm...

Malicious code in forever-phoebe-framework-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a52a262bdae65b6e905fb0373e0ed131f6cfa80de9df825df7c8e829f50809 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122758

Malicious code in rehype-cordelia-framework-ceres npm...

EUVD-2025-122776

Malicious code in regulus-framework-chai-andromeda npm...

EUVD-2025-121728

Malicious code in spinner-geckodriver-framework-zenith npm...

EUVD-2025-113587

Malicious code in flare-framework-ursa-webdriver-mocha npm...

EUVD-2025-113421

Malicious code in framework-public-redis-test npm...

EUVD-2025-122597

Malicious code in resolvers-framework-framework-markdown npm...

EUVD-2025-121852

Malicious code in solis-forever-framework-prettier npm...

EUVD-2025-124085

Malicious code in ophiuchus-pm2-framework-juno npm...

EUVD-2025-113419

Malicious code in framework-react-bootstrap-alphard-supervisor npm...

MAL-2025-144549 Malicious code in loopback-framework-loopback-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7b27e27c7246783d05331bd95e459820ecd9975b3cb5f76e1d50febbf6d07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...