EUVD-2025-123316

Malicious code in procyon-mongoose-meteor-castor npm...

EUVD-2025-124752

Malicious code in mongoose-ursa-csrf-pino-pretty npm...

EUVD-2025-121991

Malicious code in shelljs-warp-mongoose-betelgeuse npm...

Malicious code in passport-auth-mongoose-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d85f744ac10f023e729b0938e368ce262176e72333839512dcd5f6d5f7e510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116038

Malicious code in blitz-thuban-mongoose-janus npm...

Malicious code in slidev-mongoose-middleware-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e740fbc701afa1668b536493648225563f609e28680c2dced973d44fa761e5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143575 Malicious code in indus-resolvers-regulus-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409c9280aa687fece421d6f06022969bc704c4e4883823547dbb67afa933118f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140064 Malicious code in blitz-thuban-mongoose-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a38b52da158ae13c533abaa878bd0546783bdc722f4e37c25cb1f7735c7199a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124767

Malicious code in mongoose-enif-apollo-eris npm...

EUVD-2025-120879

Malicious code in ursa-commitlint-transform-mongoose npm...

Malicious code in ursa-commitlint-transform-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb28edfc6231cf265a832bc4221e5e5b761e862f2c5a22c556cb296ab24fa246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-mongoose-mdx-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f685c7f1a1ccbaf9d2854a73087c26e670062432dfb5c8300287384444aca577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-module-elektra-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a0129e705995946096cc1b09d89db140a9664dde18adae9da16c0059a0004d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148122 Malicious code in spectron-protractor-nconf-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4dfe990dbd0d65d1f78fb921819fad3f8ebe875a224734af2b927d4d3e8d38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in writable-mongoose-dagda-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ac53712435c415c5022e9db0c005c007c91f0d750139977a5064767e5a3578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-mongoose-scripts-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c8881d3331a199f19842e80240df5da41adea1181cadde5924c73d69f70e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121551

Malicious code in superagent-castor-mongoose-morgan npm...

MAL-2025-141259 Malicious code in cross-env-mongoose-juno-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ed32850119f2ab08cc8fcad8533e7034e3c689822c26222db357b516b7554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145160 Malicious code in mongoose-module-elektra-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a0129e705995946096cc1b09d89db140a9664dde18adae9da16c0059a0004d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147356 Malicious code in rest-mongoose-cosmos-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec8c395f1c5373c254a1210bf0c7c699cfbc6a52c5a2a81f59fb1803c47f469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...