EUVD-2025-120281

Malicious code in xenon-mensa-test-parcel npm...

EUVD-2025-123961

Malicious code in parcel-impulse-dotenv-cosmos npm...

MAL-2025-145962 Malicious code in parcel-luna-markdown-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb3d20e200dc928732cdc59fb78acbb70d21a7cfd2dd6a163370111f47d39b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139513 Malicious code in apollo-fornax-parcel-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4428990b52194111194eed7d777050d56daa9124b291ecad8271bf7dd940afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147965 Malicious code in sirius-parcel-electron-builder-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d82865d2c4c118814f34f9e55544cc147c81d7874040ad365913faf99ebac58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122142

Malicious code in sedna-parcel-css-loader-materialize npm...

EUVD-2025-121026

Malicious code in ultra-node-config-parcel-registry npm...

EUVD-2025-122176

Malicious code in scripts-sadr-parcel-markdown npm...

MAL-2025-145965 Malicious code in parcel-mensa-vuetify-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdaae7c1522c825d5fc88e7dee72b39025eedf7b9ba29e41812384ecb3969fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144598 Malicious code in lynx-parcel-telesto-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a81e296bc597462543d7c7356b81d22d0bd5ba481700455ce5e90096884655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148270 Malicious code in start-fornax-cosmos-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17faf8d360e6c0bbb43bfec05c64b4a0c07b45a477bdb0877c1fc4560e6650d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145947 Malicious code in parcel-apollo-framework-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea42becba6a089bebabca0dc3b4529b470bb588c4ad13b4ebd10402cbc0a618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149118 Malicious code in venus-parcel-markdown-pdf-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d77e33fa6ab5a9f2a3b96a855635c489b92850c24dbce745e25844b9ea32b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145545 Malicious code in node-sass-jsonp-parcel-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb23bcd2e28f3cbf0db247c4c93ccc0d4a606ec4fab7f1500a5209e6bc140297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121268

Malicious code in thuban-parcel-fornax-nightmare npm...

EUVD-2025-112299

Malicious code in janus-jekyll-parcel-dotenv-safe npm...

EUVD-2025-123958

Malicious code in parcel-markdown-pdf-cli-centauri npm...

EUVD-2025-112537

Malicious code in indus-sagitta-dagda-parcel npm...

EUVD-2025-123391

Malicious code in private-eris-express-parcel npm...

Malicious code in telesto-adonis-private-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 296dbe3b7c4a799c4b3747043791be2e3e195b8e46d0351f9297646c4408e1ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...