MAL-2025-146776 Malicious code in publish-browserify-callback-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c864ab0f3ea20a6a763e34b88d57a3110cef1948b43a3c1c9f9b6cbaebab520c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144535 Malicious code in loop-solis-charon-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0269f648fd5f31af9e6f42ee7554837900b48663d792da87cc04a3f3034c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139887 Malicious code in backend-foundation-prettier-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ae1b2df0ed35268fefa4fe80a912ce0b5ffe7c7200b7706078f02c9930d888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-sadr-mensa-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f37c6d94c5110e973d1ee3f2bb26b12db11bfa2e35bc1e57032de8fadb1cab64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147850 Malicious code in semantic-ui-kaus-install-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db6ed7182c80f2bff1213f3c1d1b6395ba3709bf4901536c388e34b08b53060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123826

Malicious code in perseus-loop-equinox-atlas npm...

MAL-2025-144210 Malicious code in koa-xml-chariklo-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b103aeecc1ae931a947c8a9794fc0e86a300ca5a75eed27352559f2e337ce941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116138

Malicious code in betelgeuse-airbnb-cosmiconfig-loop npm...

EUVD-2025-114237

Malicious code in elara-enif-local-loop npm...

Malicious code in query-fornax-loop-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8c267bf36498196cf97e6013a4a157ba965ddb10bf798d0ce5fe433650a092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-mensa-xml-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588fd6e066e2dd3092837d1df974d64a5ad7b55e0b95e3888d7853b746fbb1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113426

Malicious code in framework-middleware-lacerta-loop npm...

EUVD-2025-113107

Malicious code in graphql-loop-module-ultra npm...

MAL-2025-147472 Malicious code in rocket-koa-query-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e9a1af132a8126638baca3a85673704533f89020924385e0120402a4b1d9bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120130

Malicious code in yaml-polaris-loop-vuetify npm...

MAL-2025-147730 Malicious code in scripts-eridanus-duplex-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc40e9b3651a910d7a97424e0a6b2f9dfb784f58b1ac169adad47c54b88f1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-loop-writable-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a03548b01ada9be93ed0fb55d38631a5a7df1b6c6fd760240d194a579d9177a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113910

Malicious code in eslint-config-got-loop-airbnb npm...

EUVD-2025-111580

Malicious code in loop-solis-charon-react-bootstrap npm...

Malicious code in bulma-jest-native-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0b40cb822ff26e7b9ff2e5312fb6258c4d7e5bf4a031285331bcabfdf2cc1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...