EUVD-2025-113170

Malicious code in global-loglevel-lacerta-figures npm...

EUVD-2025-111717

Malicious code in link-async-global-reveal-md npm...

Malicious code in lint-staged-commitlint-global-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304b77175b845c66db53476f7ce9d03f92d733e55c29c84ccab5770fe6f45bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122145

Malicious code in sedna-nightmare-global-apollo npm...

Malicious code in husky-global-lint-staged-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4d5f79c4d1a26757a542e6f25f54750d63a47fed852f3fc6decaf700d2b8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142935 Malicious code in global-fornax-supervisor-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0acf146c879312a52c4a11dfd8019469b166ba992f23e25b1a184a8024ba6b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142927 Malicious code in global-csrf-xml-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a669302077b44dbbcb3bdfd3d6456495a67dbcffacbdef50b03e2fbf92f2b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-equinox-global-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eed002cb4c6101e4579e5c8032d6d32f9aba22e6cfc575876aae0c7cbb1bd2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146867 Malicious code in puppeteer-version-quasar-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de9ef915d03674eeb939c682418a9c6f4d6515f249cd66cf91aca1086e2a6c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121110

Malicious code in triton-global-unuk-inquirer npm...

EUVD-2025-111618

Malicious code in local-run-script-ophiuchus-global npm...

Malicious code in mensa-global-promise-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c94e7b9cf8e7ef681f2d8b9d20af61cfbb0ab1bd542dbba0f84d592e384c12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113162

Malicious code in global-tethys-nextjs-iota npm...

EUVD-2025-113187

Malicious code in global-babel-sagitta-miranda npm...

EUVD-2025-113171

Malicious code in global-leda-xenon-supervisor npm...

EUVD-2025-113188

Malicious code in global-await-version-prettier-stylelint npm...

EUVD-2025-116244

Malicious code in babel-equinox-global-xanthus npm...

EUVD-2025-111106

Malicious code in mira-global-docusaurus-webdriver-manager npm...

EUVD-2025-111335

Malicious code in mdx-standard-carina-global npm...

Malicious code in global-dione-eleventy-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fa86d4174d75787032ca9ad72fe97137a727c350cf3755ade0e4f4408686ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...