EUVD-2025-115565

Malicious code in centaurus-despina-pipe-oauth npm...

EUVD-2025-123661

Malicious code in pipe-cygnus-telesto-postcss npm...

EUVD-2025-123662

Malicious code in pipe-await-got-prettier-plugin-markdown npm...

EUVD-2025-122343

Malicious code in sagitta-altair-winston-pipe npm...

EUVD-2025-112053

Malicious code in jupiter-lynx-pipe-miranda npm...

EUVD-2025-123653

Malicious code in pipe-rehype-browserify-express npm...

Malicious code in hydra-pipe-lint-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8bc7b83100d9034cd6ba13dcffc904a47fe59fa5d8bfe9e592b2496d9493a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121408

Malicious code in terser-flare-css-loader-pipe npm...

EUVD-2025-111997

Malicious code in karma-pipe-leda-ignite npm...

Malicious code in karma-pipe-leda-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737a5e0e5e3b86f535e6d2720d1b3848b751f4c3cadf9db24437aa6bfeadaaf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121565

Malicious code in subscription-levels-halley-pipe npm...

EUVD-2025-123228

Malicious code in protractor-pipe-puppeteer-cressida npm...

Malicious code in meissa-pipe-dependencies-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d83ca74cc580cbd8d76790318201e0cdecf41986d97cbcec98d9b091d4ea57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113379

Malicious code in fusion-ganymede-pipe-package npm...

MAL-2025-146205 Malicious code in phoenix-pipe-subscription-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce4d42780a7001aa44f3c101823bdbcade9d30f0ca76707a7e229a9f1072c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114222

Malicious code in elara-rocket-pipe-update npm...

EUVD-2025-123121

Malicious code in publish-pipe-antares-shelljs npm...

Malicious code in materialize-express-pipe-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39da7e4b1d7e60ee0615d87ce284dd64e6b3589d46b59a2f04f438ece588486e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111914

Malicious code in koa-pipe-dorado-adonis npm...

MAL-2025-146262 Malicious code in pipe-dynamo-nodejs-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9dac7feb2c94e2e98f30abb6178870ede5b7ff4102a2d06705e6c6e7f5490b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...