Malicious code in parcel-scorpius-mdx-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc7a21c4963dc60ce68de9cc69056a821e1b943c03d0a1cda2e6c27e06d667d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-postcss-loader-mongodb-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1901883a12e5906a3aa40a43f8816c93e38fefb894c40b8271a376d5bb6d12d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121832

Malicious code in spawn-apollo-envconfig-jabbah npm...

EUVD-2025-111287

Malicious code in meissa-prettier-plugin-markdown-celeste-vortex npm...

EUVD-2025-116873

Malicious code in aether-cygnus-nodejs-got npm...

EUVD-2025-115489

Malicious code in chakra-ui-jekyll-algol-prompts npm...

Malicious code in sirius-parcel-electron-builder-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d82865d2c4c118814f34f9e55544cc147c81d7874040ad365913faf99ebac58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142946 Malicious code in global-phoebe-hermes-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b9cf8f68fe78b8401aafb88d4aaf8ce51f84264f6b6d3ad78a28340871c9b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115702

Malicious code in carina-centaurus-blaze-terser-webpack-plugin npm...

Malicious code in erwin-kembang9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58698e0f46c75270506b936d8be9b398e7fbf2c58efe269a6660e09b1408b8f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lapis83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daeef7454f903df0568af48985fdf0450d5b031b607d8d07e2cfb50bbd78354d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134631 Malicious code in joko-lepet72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab1c24630f66a10eb15b0b052d39b14e13df9b045b6788ef66e4d6fe6d3b240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9b99249339763cc2ed12fdfce3c9497ecfac8941ae5022a9666a61f5d12258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-103392

Malicious code in objectivebovidz3n npm...

Malicious code in mulyono-brongkos65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c2d7354ad0cb613be0dc3cab77d9cdfa32ccf381794e6eba832f3b0ae35b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-tahutek7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ceec550527ba9eaa6bbee77c363f6c8ef1a1db536d67545a84bc8f3c62c1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97541

Malicious code in joyouscheetahz3n npm...

EUVD-2025-97473

Malicious code in knownmandrillz3n npm...

EUVD-2025-100219

Malicious code in cooperativeearthwormz3n npm...

EUVD-2025-104160

Malicious code in lina-semur45-riris npm...