EUVD-2025-124291

Malicious code in non-blocking-vega-jovian-csrf npm...

MAL-2025-142946 Malicious code in global-phoebe-hermes-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b9cf8f68fe78b8401aafb88d4aaf8ce51f84264f6b6d3ad78a28340871c9b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123957

Malicious code in parcel-markdownlint-start-uglify-js npm...

EUVD-2025-122909

Malicious code in radiant-development-eslint-plugin-nodejs npm...

EUVD-2025-113809

Malicious code in europa-xanadu-equinox-flare npm...

EUVD-2025-123009

Malicious code in quantum-promise-phoenix-nodejs npm...

Malicious code in parcel-scorpius-mdx-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc7a21c4963dc60ce68de9cc69056a821e1b943c03d0a1cda2e6c27e06d667d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115032

Malicious code in convict-jsonp-query-castor npm...

MAL-2025-142969 Malicious code in google-sagitta-nodejs-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338abc925116d84e0ecc7c1b0f9dda422e67c5ad6a11245fb5ce6333b89b3a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-kembang9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58698e0f46c75270506b936d8be9b398e7fbf2c58efe269a6660e09b1408b8f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lapis83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daeef7454f903df0568af48985fdf0450d5b031b607d8d07e2cfb50bbd78354d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134631 Malicious code in joko-lepet72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab1c24630f66a10eb15b0b052d39b14e13df9b045b6788ef66e4d6fe6d3b240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-100219

Malicious code in cooperativeearthwormz3n npm...

Malicious code in mulyono-brongkos65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c2d7354ad0cb613be0dc3cab77d9cdfa32ccf381794e6eba832f3b0ae35b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97541

Malicious code in joyouscheetahz3n npm...

EUVD-2025-104160

Malicious code in lina-semur45-riris npm...

EUVD-2025-103991

Malicious code in lutfi-tomat15-riris npm...

MAL-2025-126905 Malicious code in gita-serabi31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 398a24405dcea736cadb13157dc02ecadd18dd345467bde2c4914d1042061240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-103392

Malicious code in objectivebovidz3n npm...

Malicious code in exuberant_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9b99249339763cc2ed12fdfce3c9497ecfac8941ae5022a9666a61f5d12258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...