EUVD-2025-122294

Malicious code in sagitta-vuepress-delphinus-init npm...

EUVD-2025-112493

Malicious code in init-europa-cressida-yonder npm...

EUVD-2025-113376

Malicious code in fusion-init-helios-hercules npm...

EUVD-2025-114189

Malicious code in electron-init-vulcan-wolf npm...

EUVD-2025-121897

Malicious code in soap-nextjs-init-tool npm...

EUVD-2025-124577

Malicious code in nebula-galaxy-aurora-init npm...

Malicious code in library-init-flare-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd269a356ae3f884d25ed3afd367540fa7f952b3a55f8746d6c3a7ab5ef34e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120432

Malicious code in winston-init-public-prompts npm...

EUVD-2025-115662

Malicious code in carpo-init-stop-terser npm...

EUVD-2025-114851

Malicious code in cross-env-init-sedna-telesto npm...

EUVD-2025-113891

Malicious code in eslint-gatsby-init-express npm...

EUVD-2025-111726

Malicious code in library-pulsar-mini-css-extract-plugin-init npm...

EUVD-2025-121422

Malicious code in telesto-wezen-mira-init npm...

Malicious code in cross-env-init-sedna-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e729a7f1b0789e7b94d947b7ba5acb27a8acd7ae8ba2fa26a5ab8cebd8b37ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146514 Malicious code in prettier-stylelint-odin-hexo-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b0d249f0e04a222afa4a1c8e67c735869b48c62e1d747d50ce0bf55860b905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140338 Malicious code in callisto-koa-passport-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0618017da8555c11693d63a92fb08bd79ee8b5a12fa2199727a8fbca59b2c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145790 Malicious code in odin-carpo-init-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84df6db1ad28199f71552122f364b369efb4868373a65e0ed553444b217fb422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140335 Malicious code in callisto-init-astro-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e7dee1332ca141e642cda2234291c22182742cb21c0c4340edc739302c351aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148173 Malicious code in spica-postcss-init-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0dd7516ab206c60ecc4fc90715916d1522813a27c6be01c8e4d65420b4f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-gridsome-init-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e117de56da81c5c34a98930ad169862d0bb5f3bee646ae6e54accefaaf814f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...