Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9860e43f28b0ece8e3c8d36b595e5eee206c686e720066e2a8d028415cf4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148620 Malicious code in tethys-gulp-bootstrap-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91010575aafc5a357f617818a3e5202f494f84ef43eb7f26c7cab7739f7235e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121117

Malicious code in triton-convict-yakutsk-gulp npm...

EUVD-2025-113625

Malicious code in firebase-antares-gulp-elektra npm...

MAL-2025-143113 Malicious code in gulp-celeste-celeste-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc22f76f8f70729c7e054321492c0f31c542d27f0daf0305af86a95cc709877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-command-luna-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ae8040998f40a0ab4389d7ecae619200c50d3cfc532206a62d56ab42529709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139413 Malicious code in antares-gulp-apex-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b128228eb51518ab485665e8665fddcb1645b49f06e44cdb7c6b4c72c8c74071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124204

Malicious code in nuxtjs-typeorm-odin-gulp npm...

EUVD-2025-115129

Malicious code in commitlint-enif-pegasus-gulp npm...

EUVD-2025-115000

Malicious code in cordelia-shelljs-gulp-optimize-css-assets-webpack-plugin npm...

EUVD-2025-116689

Malicious code in antares-gulp-apex-spinner npm...

EUVD-2025-113323

Malicious code in galaxy-gulp-socketio-solis npm...

MAL-2025-143606 Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9860e43f28b0ece8e3c8d36b595e5eee206c686e720066e2a8d028415cf4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115411

Malicious code in chariklo-gulp-sync-child-process npm...

EUVD-2025-112995

Malicious code in gulp-json-buffer-grus npm...

EUVD-2025-124104

Malicious code in ophiuchus-gulp-express-nightwatch npm...

EUVD-2025-116189

Malicious code in barnard-nebula-altair-gulp npm...

MAL-2025-49156 Malicious code in epic-gulp-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c052f7f555ae651081d7524dbab57753500980d2ef82c6e29da03fe49997ef2 The package epic-gulp-utils was found to contain malicious code...

EUVD-2025-37137

Malicious code in epic-gulp-utils npm...

Malicious code in epic-gulp-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c052f7f555ae651081d7524dbab57753500980d2ef82c6e29da03fe49997ef2 The package epic-gulp-utils was found to contain malicious code...