EUVD-2025-124688

Malicious code in mutation-rehype-semantic-ui-install npm...

MAL-2025-143689 Malicious code in install-uninstall-eridanus-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a783a109f2ecd48aebe6cfed3f14cd877e84d3a42b39daae06e048a0c8599f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145645 Malicious code in norma-janus-install-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf62f55865ad3583ff2538e038e4062ec8df240b1b3d96090545a4b0a9521548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143339 Malicious code in hexo-csrf-slides-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4060512652c1775f10dad8705e2c562273f340ce3d86a7b19b503e23e9b2928f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148469 Malicious code in taurus-install-eslint-plugin-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c242bab0d2e207a9faadf024324d17dcbe6f03b5757d823bc421e6a72ee91f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112332

Malicious code in jabbah-leda-install-eslint-config npm...

MAL-2025-143687 Malicious code in install-testcafe-quark-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4974a01ca69fac48c452e695ebc3893a9ca2b8964f0b67369be05735fc7101e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143396 Malicious code in hugo-prompts-install-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323f5bb8d985d0dc02ff975746ce4d5f88126d9da820e1d55eb820e3a144653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112428

Malicious code in install-semantic-ui-warp-fork npm...

EUVD-2025-114537

Malicious code in dependencies-lacerta-hermes-install npm...

EUVD-2025-112439

Malicious code in install-eclipse-supervisor-markdown-pdf npm...

EUVD-2025-121286

Malicious code in thuban-backend-install-wolf npm...

EUVD-2025-122465

Malicious code in rimraf-pegasus-blaze-install npm...

EUVD-2025-123903

Malicious code in pegasus-backend-event-install npm...

EUVD-2025-116021

Malicious code in bootes-install-impulse-phenomic npm...

MAL-2025-139723 Malicious code in auth-install-express-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc84c9cea7a462d14f089d9789f7cf7e51ace437fac4962b642f9119a22902e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120481

Malicious code in weywot-xanadu-yaml-install npm...

EUVD-2025-123388

Malicious code in private-install-radiant-version npm...

EUVD-2025-115699

Malicious code in carina-draco-install-convict npm...

Malicious code in loopback-install-cosmos-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27fe72bddd7ee5698a90b2681d3e1802889bb959c6cac112326eb20b2f1d6a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...