EUVD-2025-120616

Malicious code in webdriver-manager-chromedriver-fusion-achernar npm...

Malicious code in airbnb-fork-mutation-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793b36b14fb2abf3bdaac4f697b01eff9656ab057f26f8af0397d78ec7130074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113372

Malicious code in fusion-lint-staged-chromedriver-aquarius npm...

EUVD-2025-113631

Malicious code in figures-protractor-changelog-fusion npm...

EUVD-2025-120602

Malicious code in webdriver-manager-materialize-fusion-alphard npm...

EUVD-2025-113366

Malicious code in fusion-restart-koa-nebula npm...

EUVD-2025-112197

Malicious code in jekyll-transport-fusion-css-loader npm...

Malicious code in cassini-hyperion-fusion-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a1954d8bff61dbdd15f863a66288338f3f7e1bc2f81afc76343916f9a31925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115640

Malicious code in cassini-hyperion-fusion-postcss npm...

EUVD-2025-113644

Malicious code in figures-fusion-nextjs-auth0 npm...

EUVD-2025-113770

Malicious code in exec-fusion-backend-corvus npm...

EUVD-2025-113966

Malicious code in eridanus-fusion-winston-blaze npm...

Malicious code in dagda-fusion-altair-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f094ba9baa49f34d1f0414a382a467ee52bf655487152b52bfbc124b6c8b5cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113369

Malicious code in fusion-perseus-global-fornax npm...

Malicious code in despina-fusion-typeorm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40abb8a24d7c690b5112addea229e5308d47adda807501e929ab97cdaacc57c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113365

Malicious code in fusion-rollup-plugin-hexo-grus npm...

Malicious code in husky-polaris-fusion-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e07928c11a8f6e58b9cae42dddfcfc6bd8f19d423bb3f515f3c11f5acc3363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-fusion-terser-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9e52675c558394ae57cdd87ab9345caba594dbcea1608a9bff66bc6ab90bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121796

Malicious code in spectron-webdriver-fusion-nightmare-metalsmith npm...

Malicious code in enif-fusion-chariklo-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99b8a29edbf68f38fa93c36114a7188b726f9e453a14c9ec6da28db44f7f94d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...