Malicious code in frontend-chakra-ui-standard-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8520d1091a873c4269619f99e8e6a1a7b3b45d36e1ade66d7ba940a0be49c292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111941

Malicious code in kinetic-frontend-csrf-unuk npm...

EUVD-2025-112526

Malicious code in ini-draco-frontend-quark npm...

EUVD-2025-113413

Malicious code in frontend-build-css-loader-europa npm...

EUVD-2025-113613

Malicious code in firebase-frontend-apollo-perseus npm...

EUVD-2025-124797

Malicious code in mongodb-cosmiconfig-impulse-frontend npm...

Malicious code in nightwatch-ursa-triton-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2fe6abaf7b95539a87fa51af803b1e73749edcbcf422918007d6ca8e2ff864a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115667

Malicious code in carpo-frontend-callback-gacrux npm...

Malicious code in frontend-epimetheus-flare-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee12fef9940c04e57d4a88de724693eace9f6bf1bbf6abf1b73862f5c182b3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-phoenix-hermes-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f13dae0a6b9099cf69f24f905c54a9e0d5e3b7825909735087f068e4787d854d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121696

Malicious code in sqlite-iota-passport-frontend npm...

Malicious code in await-frontend-duplex-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b1660df20d7f88c2fc37a0a8d4337f54a9d483ee2fc063ac992d6e53df1b3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124212

Malicious code in nuxtjs-perseus-frontend-callisto npm...

EUVD-2025-115854

Malicious code in bunyan-nightwatch-frontend-query npm...

MAL-2025-144691 Malicious code in markdown-pdf-frontend-rimraf-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81956f1b9dd174b55f6d0b1296d2a4ae9ca30a4a82a3c848a5a3a4d3c331e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144055 Malicious code in jupiter-frontend-io-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34176c946bef9512eef39a6bf7c7ddc4aeecbe799512a162fa76578058365c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141388 Malicious code in cygnus-upgrade-frontend-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4efd3889cc38715cfa87373999a9ac8a9bc9757e20af388aa69dd89fa580fa57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142704 Malicious code in frontend-hydra-morgan-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b963aa21771fb79afb2a1d90627a8185e9f4f8c71fc8ee3b0bdbd1516edec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121202

Malicious code in toml-websockets-dynamo-frontend npm...

MAL-2025-142709 Malicious code in frontend-mira-indus-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2f5b74653ef8684794a4ecb5d3a754b2e0b9cf2db7fd5352e3ff15ddce16d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...