EUVD-2025-116546

Malicious code in aquarius-venus-nodejs-soap npm...

EUVD-2025-120073

Malicious code in zenith-polaris-warp-nodejs npm...

MAL-2025-145572 Malicious code in nodejs-mongoose-dotenv-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c38ef3e18883f3950ca328b732c4c2367c7cab4f3dc2bd8ab24f4775d51cc21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112979

Malicious code in halley-cosmiconfig-nodejs-ganymede npm...

MAL-2025-145569 Malicious code in nodejs-javascript-winston-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08759811e9231c84fe5943c1d82297170a12b450089b82e470c7d2b2d89911e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112716

Malicious code in hugo-prompts-install-nodejs npm...

Malicious code in testcafe-xenon-chakra-ui-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e267c663a12b26a567a3e6b07f7a2e36b7ae20b41b5d94b5f4b655fd5f09d444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-tailwindcss-nodejs-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29f2c221f11923d5f6b23ee57f3071b738e1689f470d3de977ae6470d6b4c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124872

Malicious code in miranda-ora-module-nodejs npm...

Malicious code in cheerful_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3862849185c3397382414e8a070e3fdda67253d43642053348131e4460f8566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131706 Malicious code in zain-lapis65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956d7ba7c23ac352f0de3cc9c1c67645105e9fae48151f3fb1fcc1f973e16029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in close_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6955629d35c426a0fdaee25339af0cbc2577b6bbd068de90a76214ddb0b115f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-103138

Malicious code in optimisticcarpz3n npm...

EUVD-2025-105703

Malicious code in drivingplatypusz3n npm...

EUVD-2025-88652

Malicious code in stripedflyingfishz3n npm...

EUVD-2025-87948

Malicious code in vocationalcarpz3n npm...

EUVD-2025-89505

Malicious code in patria-semur81-miaww npm...

EUVD-2025-89599

Malicious code in oktafian-rujak95-miaww npm...

EUVD-2025-78352

Malicious code in selectiveearwigz3n npm...

Malicious code in joni-ikan3-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557978bd63fd5d8d5cc9c53eb5b56259072af203d877d9cf87f88a5f2829c3af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...