MAL-2025-145158 Malicious code in mongoose-koa-jekyll-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e938303663a27d9f806911acfb796bc1db37b7e755a0b5ea10cb0f1a0132e6f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146366 Malicious code in polaris-shelljs-jekyll-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de091a3968f27ce74c81fbe514c2fa98c46ffdd8b63a1a10948c72140895732c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143455 Malicious code in hydra-sails-jekyll-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19940a1065baf15cee8db0d01a56f9abc980f3d4d7673e36aa7d1e8a696b1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122206

Malicious code in scorpius-shelljs-jekyll-meissa npm...

EUVD-2025-124225

Malicious code in nuxtjs-aurora-bellatrix-jekyll npm...

EUVD-2025-122707

Malicious code in relay-zenobia-webdriver-mocha-jekyll npm...

EUVD-2025-123474

Malicious code in postgres-sails-jekyll-react-bootstrap npm...

EUVD-2025-113428

Malicious code in framework-jekyll-colors-library npm...

EUVD-2025-122799

Malicious code in registry-cygnus-jekyll-rimraf npm...

Malicious code in nuxtjs-draco-jekyll-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4c5bf59cb51cffcb6db9d40e5ca9295d082a2e8f6ab9d0beff342779612cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123242

Malicious code in protractor-dactyl-nightmare-jekyll npm...

EUVD-2025-123630

Malicious code in pm2-algol-flare-jekyll npm...

EUVD-2025-116522

Malicious code in ariel-bellatrix-postcss-loader-jekyll npm...

EUVD-2025-111406

Malicious code in markdown-pdf-umbriel-jekyll-io npm...

EUVD-2025-114962

Malicious code in corvus-chariklo-jekyll-husky npm...

EUVD-2025-122683

Malicious code in release-it-xo-jekyll-relay npm...

EUVD-2025-112543

Malicious code in indus-nconf-jekyll-yonder npm...

EUVD-2025-120595

Malicious code in webdriver-manager-semantic-ui-jekyll-arcturus npm...

EUVD-2025-122452

Malicious code in rocket-jekyll-geckodriver-dactyl npm...

Malicious code in jekyll-castor-dependencies-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c96e67c6ad324876e8e775f06dd8ca2818411b3b50df8dd9368f502dfce5e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...