EUVD-2025-121267

Malicious code in thuban-postgres-sails-phoenix npm...

MAL-2025-146452 Malicious code in postgres-xerxes-changelog-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0175d3df92c5f5ea2098b26de86bbb5dfcd75cad02a6e06b6ef549a7591cfcbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147807 Malicious code in selenium-module-non-blocking-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21618fc4ab8833e077bca53b682ff77591bb0149adb8ef2c46b01844066d24d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143954 Malicious code in jovian-mocha-postgres-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933b00c6a74f6d2bd88e6379856703cfbbd465278b276af4693ce443f13ac429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144547 Malicious code in loopback-firebase-postgres-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2789696425e4ec276c93faea29470a11265e41a4117bcdbc14f88a208240a63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114377

Malicious code in dotenv-parse-variables-postgres-cz-conventional-changelog-transport npm...

EUVD-2025-113422

Malicious code in framework-optimize-css-assets-webpack-plugin-start-postgres npm...

EUVD-2025-122772

Malicious code in regulus-loopback-gravity-postgres npm...

EUVD-2025-116638

Malicious code in antd-postgres-eleventy-polaris npm...

Malicious code in chai-postgres-spica-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86423b10b6f306d99f24e92167c625a39c2149992f37343635ede70b25d42e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-postgres-forever-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8721b5af0dbe9dec968beee5e2b0a96aad969806791083ca6d0be1ea401c9c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-postgres-module-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87297a5860fcee5829f7e212c41486ad5a4a23f21ca3ba580b5af5d2b4bc41ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124194

Malicious code in oauth-dotenv-safe-sagitta-postgres npm...

Malicious code in nconf-eslint-plugin-postgres-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27040d3214079953d8c3c96719261f6c8568a04a0970d14d7e3b6677afbb30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120449

Malicious code in winston-bootes-package-postgres npm...

EUVD-2025-116597

Malicious code in apollo-docusaurus-postgres-kronos npm...

MAL-2025-140601 Malicious code in chai-postgres-spica-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86423b10b6f306d99f24e92167c625a39c2149992f37343635ede70b25d42e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146445 Malicious code in postgres-resolvers-luna-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11803c5a004b65527f2ef96e5f36fb752b13276d33c9bff1b5bc22b6479620db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123473

Malicious code in postgres-spawn-rigel-private npm...

Malicious code in firebase-leda-octans-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046135d9533214ad4d91e18be5daabadf580eab15d8555b1898656eb50254295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...