EUVD-2025-123123

Malicious code in publish-parcel-mysql-hermes npm...

EUVD-2025-123958

Malicious code in parcel-markdown-pdf-cli-centauri npm...

EUVD-2025-116866

Malicious code in aether-parcel-equinox-cordelia npm...

EUVD-2025-116219

Malicious code in backend-configstore-ultra-parcel npm...

MAL-2025-139966 Malicious code in betelgeuse-apex-async-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b03ca299b92c0eea799ba3395d5f76c7333de5e854b7bb98b943deab8be90e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112537

Malicious code in indus-sagitta-dagda-parcel npm...

MAL-2025-145956 Malicious code in parcel-eslint-config-castor-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed09a09c963d1bf3ef1d986a98accc358353ab58dfcebaa264519dedcfc5a6f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146628 Malicious code in procyon-xml-phoebe-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 708a7481e5c656d073f99461697fcccf5ace3066bf25a28a771a53b4beea90db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143576 Malicious code in indus-sagitta-dagda-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29288bfc5d3bd96c1ca13bec626b0fd4fa6d455e3b04b89dc707940b6056572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142130 Malicious code in equinox-parcel-blaze-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e374f9c950af44bf47c85945c93866b436db4cd4d9bbc547b76f49cbee1b42f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145969 Malicious code in parcel-rollup-plugin-andromeda-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aadf58e83bbd93bf6fdc89a44ce9ae8e2b41ca169e02a04313e35a1f02b2c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149650 Malicious code in xenon-mensa-test-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734533733cb93e6d7ba24767567df55e07992b9ccf15111dc99a7dd30db9cc6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147781 Malicious code in sedna-parcel-css-loader-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890b20fdeac58083ea4dc8ac0159ee633ef660eb39bd5b22367ef4442d9424b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146799 Malicious code in publish-parcel-mysql-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4600f02aa1b42d0cbe2f15feeb35fe523685db00d9a4672ab4254b84fd88a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145950 Malicious code in parcel-aurora-pegasus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0850d9ceb923ea3b8c1fae4e07e33f2a81a4e2efb322eab5c70dcae054468a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145949 Malicious code in parcel-auriga-express-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e704fcb48a26e6e92d57e74702f29a59010b27f3610b7b864318db8bc6ccf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145953 Malicious code in parcel-carpo-cypress-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51611f11cebf50b4cdacfccdd2e1979e08f8252c810d6cd9c4f167da72720ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148489 Malicious code in telesto-adonis-private-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 296dbe3b7c4a799c4b3747043791be2e3e195b8e46d0351f9297646c4408e1ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123957

Malicious code in parcel-markdownlint-start-uglify-js npm...

Malicious code in stream-loop-parcel-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38929f7a646ff8d1293e4c17a38a88606996a4ab7d34e053fdd1cfb786e8e510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...