EUVD-2025-124627

Malicious code in native-oauth-fork-webdriverio npm...

EUVD-2025-121380

Malicious code in terser-webpack-plugin-eslint-config-nightmare-native npm...

EUVD-2025-115636

Malicious code in cassini-native-blitz-bunyan npm...

EUVD-2025-114619

Malicious code in deimos-comet-ganymede-native npm...

EUVD-2025-116183

Malicious code in barnard-vuetify-lyra-native npm...

MAL-2025-148648 Malicious code in thuban-development-transform-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9970fc2cf7485e3a83f92015f3ef345dc16d84cdf3b6f96adcc69731705a2da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147936 Malicious code in sirius-aurora-warp-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5daf0e0b031d2cf938436afe95c35e412c219634f9978e99bd972480618c7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149691 Malicious code in xenos-thuban-resolvers-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c87583f813bf3b289010d2d1fe63c705d1c7b1a54fd57decd0f17f40b0c5d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114661

Malicious code in dactyl-native-superagent-nextjs npm...

EUVD-2025-124624

Malicious code in native-quito-venus-semantic-release npm...

EUVD-2025-124623

Malicious code in native-spectron-mini-css-extract-plugin-loopback npm...

EUVD-2025-123244

Malicious code in protractor-aldebaran-native-quito npm...

EUVD-2025-115888

Malicious code in bulma-jest-native-loop npm...

EUVD-2025-112854

Malicious code in helmet-native-quito-capella npm...

EUVD-2025-122468

Malicious code in rimraf-native-wezen-karma npm...

EUVD-2025-122091

Malicious code in semantic-release-native-server-mysql npm...

Malicious code in protractor-aldebaran-native-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec0d5cc0e40ec412b1d438650ad8c4376000d846c37ff0e84f10ed2b00b6ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148291 Malicious code in stop-colors-native-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab01a52a3f41b139889ce3357bc601b3f2ca49d5a2913f21185e024b9c3e0aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143955 Malicious code in jovian-native-google-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18c92729ce788c0306a566215970143f0eef297f78f5ca7f805ea1ab316e072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139919 Malicious code in barnard-vuetify-lyra-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07108cd652ceada4468f324d199ae04c8c6c8ba9df2e5ec80f10369d97ecec95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...