EUVD-2025-114356

Malicious code in dotenv-safe-global-jsonp-centaurus npm...

Malicious code in axios-spectron-webdriver-jsonp-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd0adffbc7a312dda0d1b1b32b2a3f16fb552fba0546b7e16774512ab0843f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115972

Malicious code in browserify-meteor-exec-jsonp npm...

EUVD-2025-121501

Malicious code in sync-norma-algol-jsonp npm...

EUVD-2025-115770

Malicious code in callisto-jsonp-avior-comet npm...

EUVD-2025-114296

Malicious code in duplex-jsonp-zenobia-gemini npm...

EUVD-2025-115378

Malicious code in charon-pegasus-jsonp-schema npm...

Malicious code in sass-loader-native-jsonp-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721529421aaeef8accb9c675072bf8c91146dda70fecc5f4ea3d58ee3727c41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112906

Malicious code in heka-jsonp-triton-fetch npm...

EUVD-2025-122721

Malicious code in relay-jsonp-jsonp-csrf npm...

EUVD-2025-114486

Malicious code in development-kastra-lint-staged-jsonp npm...

MAL-2025-140132 Malicious code in browserify-meteor-exec-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122e7097b25471597433a406c160c80c2b71d0f76c3ef49421322f2d34b31c6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144011 Malicious code in jsonp-vuepress-uninstall-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e22c1b7d849adddb2164e3659fb2e5c1d9952215c0d2bb3750fe6a52862dfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141690 Malicious code in dorado-jsonp-alphard-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d986aac1302f1d13be93e50f6e9f51836d226d7e9f291313b280eaec194504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149708 Malicious code in xerxes-jsonp-castor-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f28f765c1785c39f9704828b05faed52ece79ce41a3e4c2bc9657f50b062d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139663 Malicious code in atlas-typeorm-jsonp-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a937ac555dd0194b7f6f5ba5db28bbd261412ec503e9a23d31fb3992b936bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112760

Malicious code in hexo-sails-element-ui-jsonp npm...

EUVD-2025-116353

Malicious code in auth0-jsonp-promise-buffer npm...

Malicious code in gridsome-library-jsonp-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc5c16176702b84773f164a05dec951742e942a5f7b658af063f0cc6480aa19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-typeorm-jsonp-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a937ac555dd0194b7f6f5ba5db28bbd261412ec503e9a23d31fb3992b936bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...