Malicious code in google-hermes-telesto-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583eed0b0920ff215525064915600ba5db9ac1537af94ba4462d0043514e7c64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111380

Malicious code in materialize-cache-socketio-eleventy npm...

EUVD-2025-122142

Malicious code in sedna-parcel-css-loader-materialize npm...

Malicious code in materialize-spinner-superagent-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c569a14bb5035377c221313c418b1c79724b1e26641bc2a9027efc4adbde6eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-materialize-config-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18db55707488097b21f274ec5371d25d8c58b91c6586082978d0fb1407c73349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123128

Malicious code in publish-materialize-spawn-quark npm...

EUVD-2025-121484

Malicious code in tailwindcss-iota-materialize-spica npm...

Malicious code in sagitta-webpack-karma-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a292850308a455a38f1dd6bcfcc0ff11ffa9c15f7cb817a8023b7dea243468ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116350

Malicious code in auth0-materialize-electron-xerxes npm...

Malicious code in materialize-farout-postcss-loader-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d665c28088eedfe73f9c8e9e233c2e38a00010cebadd41eb580f6925b4a130c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111358

Malicious code in materialize-titan-start-morgan npm...

EUVD-2025-124701

Malicious code in mutation-bunyan-materialize-style-loader npm...

EUVD-2025-113609

Malicious code in firebase-materialize-morgan-titan npm...

EUVD-2025-111373

Malicious code in materialize-farout-postcss-loader-umbra npm...

EUVD-2025-121542

Malicious code in superagent-kinetic-vega-materialize npm...

EUVD-2025-111366

Malicious code in materialize-polaris-gatsby-bunyan npm...

MAL-2025-144831 Malicious code in meissa-rate-limiter-materialize-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac82d38d94d108399abb187b10b9085c15e5ffd3c1ca4b655b4777880b1a1c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143487 Malicious code in hyperion-materialize-nodemon-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f56f7239d33a4f26bba7157fdc7d40cd6afba61903753d0d863f6362591d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140149 Malicious code in browserify-zenobia-materialize-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 339578953fb444bcd3f114e5653528f83fed64a2fc5df25d57b79ce80fcc4f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144150 Malicious code in kaus-materialize-event-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be0d8cef8cb791f6a09503be56fe69966c6977962c7e63fbb1283afe25dc0a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...