Malicious code in zenith-polaris-warp-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ce5d07c12870a3c118a4ad89de58f1274582f8f89ea161afda22f2f8f4faee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124362

Malicious code in nodejs-csrf-dotenv-safe-solis npm...

EUVD-2025-113393

Malicious code in frontend-wasat-nodejs-nightwatch npm...

EUVD-2025-122418

Malicious code in rollup-nightmare-nodejs-terser-webpack-plugin npm...

EUVD-2025-120062

Malicious code in zenobia-nodejs-sass-loader-phoenix npm...

EUVD-2025-120634

Malicious code in wasat-mui-sadr-nodejs npm...

EUVD-2025-116546

Malicious code in aquarius-venus-nodejs-soap npm...

EUVD-2025-112979

Malicious code in halley-cosmiconfig-nodejs-ganymede npm...

EUVD-2025-111756

Malicious code in levels-node-config-nodejs-dione npm...

EUVD-2025-115023

Malicious code in convict-query-nodejs-prettier npm...

EUVD-2025-124356

Malicious code in nodejs-frontend-sync-command npm...

Malicious code in quark-pipe-mocha-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fbf13855675eb0f04555f377cf94b4bcc89c117c1b9e7a004ad4c3159c4c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-tailwindcss-nodejs-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29f2c221f11923d5f6b23ee57f3071b738e1689f470d3de977ae6470d6b4c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112229

Malicious code in javascript-nodejs-lint-staged-build npm...

Malicious code in pipe-dynamo-nodejs-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9dac7feb2c94e2e98f30abb6178870ede5b7ff4102a2d06705e6c6e7f5490b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-sagitta-nodejs-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7dc9bd45ef009b6ab43395bebf52be6466adfbaa8040ea661dbe076e5603fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111831

Malicious code in leda-nodejs-nextjs-sirius npm...

Malicious code in hugo-prompts-install-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323f5bb8d985d0dc02ff975746ce4d5f88126d9da820e1d55eb820e3a144653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144282 Malicious code in leda-nodejs-nextjs-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8488e7f3eb1b0a423523519eca85887ecd6c04e408dbec4c05e2e936659200fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146913 Malicious code in quantum-promise-phoenix-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83997c7f595e58fc0c9df6d3ab102a43b0ac4c98f777de56bcb403d0b92d078a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...