MAL-2025-139513 Malicious code in apollo-fornax-parcel-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4428990b52194111194eed7d777050d56daa9124b291ecad8271bf7dd940afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112892

Malicious code in heka-umbra-typeorm-parcel npm...

MAL-2025-145545 Malicious code in node-sass-jsonp-parcel-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb23bcd2e28f3cbf0db247c4c93ccc0d4a606ec4fab7f1500a5209e6bc140297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120946

Malicious code in unuk-parcel-antd-elektra npm...

EUVD-2025-120281

Malicious code in xenon-mensa-test-parcel npm...

Malicious code in vega-library-schema-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55dcc95f4dea0db952210a246c97eca63e5bda6d4afe8728102b9082fb2aeeef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123958

Malicious code in parcel-markdown-pdf-cli-centauri npm...

EUVD-2025-123975

Malicious code in parcel-algol-websockets-delphinus npm...

EUVD-2025-115465

Malicious code in chalk-hydra-parcel-prompts npm...

Malicious code in telesto-adonis-private-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 296dbe3b7c4a799c4b3747043791be2e3e195b8e46d0351f9297646c4408e1ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116866

Malicious code in aether-parcel-equinox-cordelia npm...

EUVD-2025-123011

Malicious code in quantum-parcel-tailwindcss-less-loader npm...

EUVD-2025-114846

Malicious code in cross-env-parcel-forever-perseus npm...

Malicious code in proxima-xerxes-await-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5410adaf1035021a86a15b259d7ce60dc0365d4b361a661abd6d2fcce409b986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123391

Malicious code in private-eris-express-parcel npm...

EUVD-2025-123950

Malicious code in parcel-sedna-react-bootstrap-nodejs npm...

MAL-2025-143576 Malicious code in indus-sagitta-dagda-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29288bfc5d3bd96c1ca13bec626b0fd4fa6d455e3b04b89dc707940b6056572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139966 Malicious code in betelgeuse-apex-async-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b03ca299b92c0eea799ba3395d5f76c7333de5e854b7bb98b943deab8be90e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142130 Malicious code in equinox-parcel-blaze-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e374f9c950af44bf47c85945c93866b436db4cd4d9bbc547b76f49cbee1b42f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-winston-janus-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85fa490b9c442ed1f763545052dcf9ce8a51b65c8331ca58d552ddb81ba2f85f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...