EUVD-2025-116032

Malicious code in bootes-algol-promise-spinner npm...

EUVD-2025-123809

Malicious code in perseus-rollup-plugin-xanthus-node-config npm...

EUVD-2025-112526

Malicious code in ini-draco-frontend-quark npm...

EUVD-2025-114098

Malicious code in eleventy-sails-inquirer-javascript npm...

EUVD-2025-114631

Malicious code in dagda-nodejs-magellan-mysql npm...

EUVD-2025-113909

Malicious code in eslint-config-inquirer-commitlint-config-angular-sirius npm...

EUVD-2025-115702

Malicious code in carina-centaurus-blaze-terser-webpack-plugin npm...

EUVD-2025-123163

Malicious code in public-gatsby-figures-hugo npm...

MAL-2025-142969 Malicious code in google-sagitta-nodejs-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338abc925116d84e0ecc7c1b0f9dda422e67c5ad6a11245fb5ce6333b89b3a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142946 Malicious code in global-phoebe-hermes-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b9cf8f68fe78b8401aafb88d4aaf8ce51f84264f6b6d3ad78a28340871c9b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-kembang9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58698e0f46c75270506b936d8be9b398e7fbf2c58efe269a6660e09b1408b8f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lapis83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daeef7454f903df0568af48985fdf0450d5b031b607d8d07e2cfb50bbd78354d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134631 Malicious code in joko-lepet72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab1c24630f66a10eb15b0b052d39b14e13df9b045b6788ef66e4d6fe6d3b240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-103991

Malicious code in lutfi-tomat15-riris npm...

EUVD-2025-103392

Malicious code in objectivebovidz3n npm...

MAL-2025-126905 Malicious code in gita-serabi31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 398a24405dcea736cadb13157dc02ecadd18dd345467bde2c4914d1042061240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-100219

Malicious code in cooperativeearthwormz3n npm...

EUVD-2025-97541

Malicious code in joyouscheetahz3n npm...

Malicious code in exuberant_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9b99249339763cc2ed12fdfce3c9497ecfac8941ae5022a9666a61f5d12258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-tahutek7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ceec550527ba9eaa6bbee77c363f6c8ef1a1db536d67545a84bc8f3c62c1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...