Malicious code in gulp-cluster-chalk-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68d6adcdba26daeeb1c108de5db41a2f44f387d2a858d78207f3204892fc6cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113002

Malicious code in gulp-await-antares-apex npm...

Malicious code in adonis-gulp-ini-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ff4c41703f7fa7c297b526ca575aaa468f04fe7b9277ccc7c91c4e74dfd5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143112 Malicious code in gulp-browserify-public-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d323d7c84f5115e992460072410129438f814ee9e3a999918e849edbe98e5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113001

Malicious code in gulp-blitz-radiant-lint npm...

EUVD-2025-112997

Malicious code in gulp-command-luna-zephyr npm...

Malicious code in hugo-cassini-gulp-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0cb35f2bb29d0c1fd0f9a34a1c8da3a37d641f3a35dd31b92417b2bb7f8b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-redis-request-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51c8ef942bd7a82c1f09f33c71aa57572c414ca06225c9880ee6e27f9a5d6fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147955 Malicious code in sirius-gulp-playwright-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c521360de0b0ca3d58c926ad007a3d8f6528de76ca5395d2ffb8fc67ee2b88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143113 Malicious code in gulp-celeste-celeste-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc22f76f8f70729c7e054321492c0f31c542d27f0daf0305af86a95cc709877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149496 Malicious code in winston-gulp-test-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6f63b35e35336a3a9fdd43cb982b8e17fbfbb1cc799341655eb1ea37467d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141470 Malicious code in dagda-gulp-quito-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38fa31b4443045d2b86867d4fa9fa611f6bc0f4d9c699520e9f00fad3713e9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143117 Malicious code in gulp-json-buffer-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5c127955b6f819a7c29832a75f751a7060b856d48eeca69ce552869a8fd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145469 Malicious code in nightwatch-gulp-rest-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 327fab4954a2a66876cb99b184626eee80b3bd5d099d27ccbf42a0ea7cb4cdf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140696 Malicious code in chariklo-gulp-sync-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da4da04f9f6c5b6991dcb2017d11ee5925ffc8c98afb5519309453f5c30e25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143606 Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9860e43f28b0ece8e3c8d36b595e5eee206c686e720066e2a8d028415cf4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143114 Malicious code in gulp-cluster-chalk-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68d6adcdba26daeeb1c108de5db41a2f44f387d2a858d78207f3204892fc6cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145080 Malicious code in mocha-gulp-cordelia-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a395ae24f7d0c1eadb39257cc219205772046202a800ef8390ac3a07011e0a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-49156 Malicious code in epic-gulp-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c052f7f555ae651081d7524dbab57753500980d2ef82c6e29da03fe49997ef2 The package epic-gulp-utils was found to contain malicious code...

Malicious code in epic-gulp-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c052f7f555ae651081d7524dbab57753500980d2ef82c6e29da03fe49997ef2 The package epic-gulp-utils was found to contain malicious code...