EUVD-2025-113638

Malicious code in figures-middleware-centaurus-init npm...

EUVD-2025-121706

Malicious code in sqlite-ariel-init-lacerta npm...

EUVD-2025-112890

Malicious code in heka-webpack-init-prompts npm...

Malicious code in init-arcturus-native-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3da5ab242a8037c19793e514c5febcb50bd0be61014c037b5af9be423c980fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-init-uninstall-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6471c91382e04439bad5add4efea64590c4612d7a34a262d27a4609557ada3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115256

Malicious code in colors-init-slides-vortex npm...

Malicious code in morgan-init-auth0-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1f7b65df5a3817d7d4aac2c24f406242e5012e4e015ce3e0b482c989f3fbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112483

Malicious code in init-quito-farout-non-blocking npm...

Malicious code in carpo-init-stop-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5641579cbb1411c260c4a54abdf90d3def958523a27947118360caa005c2f5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114163

Malicious code in elektra-init-protractor-ursa npm...

EUVD-2025-121029

Malicious code in ultra-init-spectron-package npm...

EUVD-2025-124367

Malicious code in node-sass-sequelize-init-grunt npm...

EUVD-2025-112495

Malicious code in init-development-barnard-telesto npm...

EUVD-2025-122672

Malicious code in remark-magellan-init-envconfig npm...

EUVD-2025-116241

Malicious code in babel-init-element-ui-nebula npm...

EUVD-2025-114179

Malicious code in electron-sadr-quasar-init npm...

Malicious code in puppeteer-init-eclipse-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2418e40c239a3fba75ffa4648edf93cf9cd268bb4849448363e5022edb4c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123068

Malicious code in puppeteer-init-eclipse-quantum npm...

MAL-2025-149240 Malicious code in vulcan-init-pino-pretty-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f8344d04ae5521883f7f79bbe97baff5a334a93ecff03a3abc413f5a49e990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143622 Malicious code in init-gulp-eslint-config-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a30d3a37f8255998babc71377202ccf693a25e1a222974689725548e7eff2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...