EUVD-2025-111159

Malicious code in middleware-fornax-cache-chariklo npm...

Malicious code in comet-gacrux-pm2-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7729116efe483cf849c752a73e89d5216af77a6872c275da676077adbf09f1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120814

Malicious code in venus-materialize-middleware-chariklo npm...

EUVD-2025-120728

Malicious code in vuepress-winston-middleware-sass-loader npm...

EUVD-2025-123696

Malicious code in pino-middleware-zephyr-auth0 npm...

EUVD-2025-121432

Malicious code in telesto-middleware-dactyl-perseus npm...

EUVD-2025-124098

Malicious code in ophiuchus-janus-middleware-grus npm...

MAL-2025-139989 Malicious code in betelgeuse-middleware-bellatrix-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558a753c5ec00d54999a3046a59f0048b6658f9f6baeda1a054887a37d664257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122901

Malicious code in radiant-proxima-kastra-middleware npm...

Malicious code in framework-middleware-lacerta-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31df38ca4c3e3277166d99f269c8cc7b1bfd0b00043591dc99a50a8df3940754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-jasmine-nightwatch-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8766d8d60ad74c2cf23402725bb2b7a3c14dd9413d43c03914e39a047fd977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slidev-mongoose-middleware-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e740fbc701afa1668b536493648225563f609e28680c2dced973d44fa761e5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-eslint-pavo-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d5177b0597023c87477f7e642b8c1decf833335903750003c50a01975616f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-jwt-nodejs-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876ed592f5ff69967e646f362302ccbd5320b93b6af7605fae57da5c8234402f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114056

Malicious code in enif-middleware-bellatrix-axios npm...

EUVD-2025-122511

Malicious code in reveal-md-grus-middleware-polaris npm...

Malicious code in juno-sync-middleware-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5262c9aa5283b0187448f086b75b73d09c9b6329b9468931b0f2d7e353f198f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112072

Malicious code in juno-sync-middleware-ini npm...

EUVD-2025-121916

Malicious code in slidev-mongoose-middleware-pegasus npm...

MAL-2025-146573 Malicious code in process-titan-mira-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79408ce54f9c53733daf659f97806d17e40693999ddfac0665977b04ae1c8558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...