EUVD-2025-123061

Malicious code in puppeteer-prettier-plugin-markdown-loop-iota npm...

Malicious code in query-fornax-loop-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8c267bf36498196cf97e6013a4a157ba965ddb10bf798d0ce5fe433650a092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114237

Malicious code in elara-enif-local-loop npm...

MAL-2025-144713 Malicious code in markdown-polaris-vega-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae813a6e84ccdb08cd5cb8ebe0295281892305e93d57e4c85684c0d77a016911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140703 Malicious code in chariklo-mini-css-extract-plugin-rollup-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4885d904321f1e54289c15c6b9924e8d678610816b44065f535762c4433516f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140623 Malicious code in chakra-ui-nodemon-metalsmith-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3fd1864b9a5129d2c4228d9955e4d3dc9c799a3aa1f4b18ba2932dd5c4fcdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146776 Malicious code in publish-browserify-callback-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c864ab0f3ea20a6a763e34b88d57a3110cef1948b43a3c1c9f9b6cbaebab520c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143346 Malicious code in hexo-mocha-carpo-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5f20c394984fce4284f9db4adeacf96ffc5d765f98c1d2a7e82d68f5c2597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144535 Malicious code in loop-solis-charon-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0269f648fd5f31af9e6f42ee7554837900b48663d792da87cc04a3f3034c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147320 Malicious code in resolvers-cygnus-subscription-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cef4304d5ae62ad5925a3d7772113cfab7f2f31222305bbb2d2f22097c3f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142348 Malicious code in exec-koa-andromeda-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbff9e6221e3538f5d32ce051aee8f04ba057b18ba87e9f1a0f51ab9d9c0a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139887 Malicious code in backend-foundation-prettier-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ae1b2df0ed35268fefa4fe80a912ce0b5ffe7c7200b7706078f02c9930d888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148066 Malicious code in socketio-webdriverio-mira-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6da89110ef3180e4470deb1d394bd94462f73c05afdca30d9e62cd95097f440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146438 Malicious code in postgres-lynx-server-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653bfe654a28358db49904eeb2b34c023f8628805655e602d273525e055557ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142372 Malicious code in express-docusaurus-phoebe-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b55d736c3d78cf07755776e2b8f0e5716fd4c87b87b2e6bf232c95af61c788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144529 Malicious code in loop-mensa-xml-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588fd6e066e2dd3092837d1df974d64a5ad7b55e0b95e3888d7853b746fbb1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139442 Malicious code in antares-supervisor-kinetic-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec376c7374c21bc6c2e7e7526708b9be627909142b8b6f8a4880b647e44265df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145536 Malicious code in node-sass-eleventy-framework-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c439566dd8300ae3d8feff2c2e803e331bc48a29f7f65d2c864439ffa019ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142650 Malicious code in fornax-react-bootstrap-halley-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b32223dacd35ab47cf7c3655704b015d267fd64014fdc9c9368091f01225d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141587 Malicious code in dependencies-upgrade-request-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465f8a5b50c89ad9d8f18c8e6892238427b94313db41734688588131e2951400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...