EUVD-2025-112797

Malicious code in hermes-development-virgo-promise npm...

EUVD-2025-114071

Malicious code in enceladus-ultra-promise-helios npm...

EUVD-2025-115025

Malicious code in convict-promise-transform-weywot npm...

EUVD-2025-116862

Malicious code in aether-promise-airbnb-procyon npm...

EUVD-2025-116669

Malicious code in antares-promise-thuban-ora npm...

EUVD-2025-113334

Malicious code in gacrux-promise-io-nodemon npm...

Malicious code in taurus-mdx-promise-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c325e367241c5e965dea2194667e8e615c49c2186c63d7e8bff622220960ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-delphinus-dotenv-parse-variables-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca332e25d9d61085e10b8a93b01916326bfcc7343eb2d74d224e9fe7cfc7db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123278

Malicious code in promise-meteor-dotenv-antd npm...

EUVD-2025-123289

Malicious code in promise-bellatrix-helios-acamar npm...

EUVD-2025-113701

Malicious code in farout-dotenv-parse-variables-umbriel-promise npm...

EUVD-2025-122135

Malicious code in sedna-promise-dotenv-parse-variables-vega npm...

MAL-2025-146644 Malicious code in promise-meteor-dotenv-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0709454d142f7f534a5d50fd7d991e4274f59e8f69dc2746d85e4ff3417912ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139360 Malicious code in altair-promise-castor-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c3a1a5a4ff845ee380e66cb7b5ce3ba889f5afd50a6a1ea2e02fd6f0783031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146639 Malicious code in promise-galaxy-express-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d73f608b623f0b3a98949eacc4b35515f0f7ef184928ce7a965fbc14ebff47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146631 Malicious code in promise-aether-private-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e995c1fb742ffaa236c62457efe3e86f89afb596a418f5b4fec72fee723daec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146651 Malicious code in promise-subscription-pipe-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44873f9180d44c4ea0b33fc58995dfb2d97754c2f380301d81304b5a95ba58a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146640 Malicious code in promise-global-wolf-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c542283852b34f2b6b3328de1a5885fd139dc09ab31028ccd56879b79590ad54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148799 Malicious code in transport-promise-proxima-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f046d9a431bf349ef1d33b53cc981b557a63b7aab8aebd7a20458546d1979785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146638 Malicious code in promise-equinox-materialize-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c75f5cad1d0c66172e8eb6edea35a3eaa1ad979c35d1bacf45c4b3044eaba1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...