EUVD-2025-122042

Malicious code in sequelize-transform-jsonp-sync npm...

MAL-2025-143999 Malicious code in jsonp-jwt-avior-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d24d5177d5a69fe4e89ff96082eb699b3dc32aef498477c15da8c7939e6d4938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145545 Malicious code in node-sass-jsonp-parcel-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb23bcd2e28f3cbf0db247c4c93ccc0d4a606ec4fab7f1500a5209e6bc140297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147513 Malicious code in rollup-plugin-eridanus-blitz-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfa992f1714e127498f63f69dcf5e804c95c42071e1eaacffada5f691bb554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144011 Malicious code in jsonp-vuepress-uninstall-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e22c1b7d849adddb2164e3659fb2e5c1d9952215c0d2bb3750fe6a52862dfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142381 Malicious code in express-lint-jsonp-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de6a62b53d4890622b1b329a17d46a7064aadbb7f0dff51a99f4f8fb05f02970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121503

Malicious code in sync-jsonp-less-iota npm...

EUVD-2025-112110

Malicious code in jsonp-ophiuchus-sequelize-miranda npm...

Malicious code in xerxes-jsonp-castor-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f28f765c1785c39f9704828b05faed52ece79ce41a3e4c2bc9657f50b062d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-native-jsonp-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721529421aaeef8accb9c675072bf8c91146dda70fecc5f4ea3d58ee3727c41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140729 Malicious code in charon-pegasus-jsonp-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82efbf0050b8e5d9394494a4d5e819a5bc550e287d785c51d7699688618a277f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143993 Malicious code in jsonp-charon-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c33c6c2772ea53aa5ecd5175c851302123b223a7990f46762cba9948111efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140336 Malicious code in callisto-jsonp-avior-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908f11f5f4c7839935f96d8f7d7c73ab4922cf0177174f9d9d4877093b50f428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143989 Malicious code in jsonp-blitz-cordelia-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9a2d48029e6469105d9d04046b04f81c2e0c08dcaad383e50ec9eb573552b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143990 Malicious code in jsonp-celeste-jupiter-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c205fa2d6d2d6c34d73678744fd7def89ad1b39c74fa0b3b2b31c6ac339b42e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143992 Malicious code in jsonp-charon-jasmine-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71238e390649e49d2401aaea0455dc7e0bb1a22fac50887ed8c53667113553e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141690 Malicious code in dorado-jsonp-alphard-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d986aac1302f1d13be93e50f6e9f51836d226d7e9f291313b280eaec194504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144816 Malicious code in meissa-mocha-jsonp-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c83edc36d37b3d9e117d48042f951af1920347abc4aedbb3249617799e47e8d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144004 Malicious code in jsonp-pegasus-metalsmith-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0357063f5ac8327173d6d17b484ae86c65356bf7045fd583f4ea653d3758cc61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147318 Malicious code in resolvers-bellatrix-jsonp-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85843142028b8d29b219b1af7c43c167dc226099b6803ab77b73bedbb4a5f9b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...