EUVD-2025-120074

Malicious code in zenith-phoenix-hyperion-release-it npm...

EUVD-2025-123262

Malicious code in prompts-await-phoenix-deneb npm...

EUVD-2025-124303

Malicious code in non-blocking-phoenix-figures-algol npm...

EUVD-2025-121166

Malicious code in transform-dorado-phoenix-mensa npm...

Malicious code in event-sails-public-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d555647d04d651bab45eb39b53f266c9fb4e89c2b9419b02a13f17aa58859d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-react-bootstrap-phoenix-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fd1f7f3c597a5a98d0f02b38ae7147c321a5db0e4ed178cf4dc828ff939ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111792

Malicious code in less-loader-hercules-phoenix-miranda npm...

EUVD-2025-111559

Malicious code in loopback-local-phoenix-magellan npm...

EUVD-2025-111410

Malicious code in markdown-pdf-remark-oberon-phoenix npm...

EUVD-2025-111101

Malicious code in mira-phoenix-testcafe-await npm...

EUVD-2025-112352

Malicious code in izar-phoenix-dione-mysql npm...

EUVD-2025-112204

Malicious code in jekyll-markdownlint-leda-phoenix npm...

EUVD-2025-112201

Malicious code in jekyll-proxima-titan-phoenix npm...

EUVD-2025-111829

Malicious code in leda-phoenix-bellatrix-pegasus npm...

Malicious code in blaze-morgan-phoenix-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f2730776016d8729f42fc992941a569b95e90a52a4a69625b5a6d6d7a60a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-puppeteer-got-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788ee5ebff473dad8df11e086642382331492615ac2e657a5d1576b67ab64f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-phoenix-hermes-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f13dae0a6b9099cf69f24f905c54a9e0d5e3b7825909735087f068e4787d854d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-cluster-chalk-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68d6adcdba26daeeb1c108de5db41a2f44f387d2a858d78207f3204892fc6cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-phoenix-io-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731fa23aff766760f0a59030baa0ab809c1d44a802dee5f4ec14814ab781d4ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-kronos-phoenix-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be073f8cb8485f271913239bfa8cae9973ba43ca51182df57b25b58b8718f62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...