EUVD-2025-114787

Malicious code in css-minimizer-webpack-plugin-comet-impulse-loop npm...

EUVD-2025-120558

Malicious code in webdriverio-impulse-chakra-ui-luna npm...

EUVD-2025-123961

Malicious code in parcel-impulse-dotenv-cosmos npm...

MAL-2025-143544 Malicious code in impulse-fornax-mensa-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cab4005e2a8f44c24f49a725035d36143642544ece072d87ceedefd8127e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144537 Malicious code in loop-virgo-impulse-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f7baa439a7ef55154ee9b9254ab2728fa7346ccf937a84ab806d616b5b3e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111809

Malicious code in leda-yildun-impulse-eslint-config npm...

EUVD-2025-123989

Malicious code in package-hugo-event-impulse npm...

EUVD-2025-121305

Malicious code in tethys-mira-csv-impulse npm...

Malicious code in altair-procyon-impulse-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de5f3663de96a20cf01a988ffb3549bcad8ba1ba022d315dcd7dd91abb96a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112566

Malicious code in impulse-hugo-hermes-tailwindcss npm...

MAL-2025-148751 Malicious code in tool-rocket-impulse-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da69e02ea1de6c0283031e9f19b73ff166dcc8006bfd5f7ab0b19b6d484ba878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144223 Malicious code in kronos-odin-husky-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a22743875e5744cc8a70917be29c9b2a3057d3afec2c9f87c65bd78d07c960d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-impulse-taurus-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350fe70b5ce34a808024895d7588ccf625d9851d8488c0648e6ae9a610babdde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112572

Malicious code in impulse-dotenv-safe-prompts-miranda npm...

EUVD-2025-121511

Malicious code in sync-centauri-impulse-selenium npm...

EUVD-2025-121177

Malicious code in tool-rocket-impulse-dotenv npm...

EUVD-2025-112579

Malicious code in impulse-adonis-lyra-pino-pretty npm...

Malicious code in kinetic-impulse-polaris-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae9f06594bf0c0f9bf149fd6065ba7e289724e2ad9f2bc222b94bf5de59733d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123884

Malicious code in pegasus-impulse-grus-blitz npm...

MAL-2025-149371 Malicious code in webdriverio-impulse-chakra-ui-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587c860912493689a378634f242528428044131ac8a9bd7369fa10ae5443b789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...