EUVD-2025-116919

Malicious code in acamar-perseus-rehype-iota npm...

EUVD-2025-121484

Malicious code in tailwindcss-iota-materialize-spica npm...

EUVD-2025-120095

Malicious code in yonder-iota-karma-protractor npm...

EUVD-2025-113232

Malicious code in geckodriver-rate-limiter-iota-test npm...

EUVD-2025-111294

Malicious code in meissa-package-spica-iota npm...

MAL-2025-143732 Malicious code in iota-mira-blitz-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f4e3c4abf2d34bf952220e9fd5b0a2bc93b6bab7ed1e7e4bea7acb27ab3cd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145054 Malicious code in miranda-resolvers-pyxis-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176e2b1d4ed4bcf6e6fc1408a0446559e143aad0aefcf58ad24f1b3904c0beee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142369 Malicious code in express-cache-delphinus-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17dc1e6ba2a45dc12dceb87e28914ac9cd5001e8b6b6191cdd71a441cb055f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143741 Malicious code in iota-restart-zephyr-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a7daabab530d79b8db3ad0510cf6550376ed0f4ebd84028108abfaa1eaf571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148109 Malicious code in spectron-bootstrap-yaml-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f56029d7ba08a16d0e0186ed582f9e0eee3faf4dd11a94341de93ca17195cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149853 Malicious code in zenith-iota-sedna-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0951cf7f9333702afff9bb26db65d093a3a169d26b74598e2e501bcd246b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112369

Malicious code in iota-triton-writable-cors npm...

EUVD-2025-121231

Malicious code in titan-venus-iota-jabbah npm...

EUVD-2025-112832

Malicious code in hercules-electron-builder-testcafe-iota npm...

Malicious code in antares-iota-grunt-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a774dfb8c1801bff6640839e466dffdf8f5fb9e3ddd4f4119baaf7c882cce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147193 Malicious code in rehype-winston-webpack-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213fa15900829f805bf1c60e00d07bf9ff597df2551d6624387e4b55d6343483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146406 Malicious code in postcss-loader-quito-iota-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ff2bf6dc026adfb7fcf087d65584c298b75dd1842c5baff878381350cd0ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146039 Malicious code in pegasus-iota-link-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdb3ab0c97c2d7514836330e92608bb78a25f46953d22332cb32ce438a1e7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143744 Malicious code in iota-triton-writable-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1439b571c88fef6fd5907adc4a1e16f9fb19de36f7e8ba79622ff79a3c34b79b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146597 Malicious code in procyon-iota-mui-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4fc2ced325bdb2030777324a99f250c38cbc9d416a4c685826d71101a55525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...