EUVD-2025-113468

Malicious code in fornax-polaris-nodejs-ignite npm...

EUVD-2025-123785

Malicious code in phenomic-json-nodejs-configstore npm...

MAL-2025-140426 Malicious code in carina-transport-nodejs-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9674ba3bb4b51d8d50b8bcffcf19428bbdce221fc44e026cbf3f7e6947c75775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116546

Malicious code in aquarius-venus-nodejs-soap npm...

EUVD-2025-120073

Malicious code in zenith-polaris-warp-nodejs npm...

EUVD-2025-112979

Malicious code in halley-cosmiconfig-nodejs-ganymede npm...

EUVD-2025-112716

Malicious code in hugo-prompts-install-nodejs npm...

Malicious code in testcafe-xenon-chakra-ui-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e267c663a12b26a567a3e6b07f7a2e36b7ae20b41b5d94b5f4b655fd5f09d444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-tailwindcss-nodejs-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29f2c221f11923d5f6b23ee57f3071b738e1689f470d3de977ae6470d6b4c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheerful_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3862849185c3397382414e8a070e3fdda67253d43642053348131e4460f8566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131706 Malicious code in zain-lapis65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956d7ba7c23ac352f0de3cc9c1c67645105e9fae48151f3fb1fcc1f973e16029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in close_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6955629d35c426a0fdaee25339af0cbc2577b6bbd068de90a76214ddb0b115f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-103138

Malicious code in optimisticcarpz3n npm...

EUVD-2025-105703

Malicious code in drivingplatypusz3n npm...

EUVD-2025-88652

Malicious code in stripedflyingfishz3n npm...

EUVD-2025-87948

Malicious code in vocationalcarpz3n npm...

EUVD-2025-89505

Malicious code in patria-semur81-miaww npm...

EUVD-2025-89599

Malicious code in oktafian-rujak95-miaww npm...

EUVD-2025-78352

Malicious code in selectiveearwigz3n npm...

Malicious code in joni-ikan3-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557978bd63fd5d8d5cc9c53eb5b56259072af203d877d9cf87f88a5f2829c3af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...