Malicious code in soap-promise-kronos-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532d9cdc455bc15e8e73766bcb878c564f0d199998e4ce16dad81a8fd1e399d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124501

Malicious code in nextjs-ophiuchus-promise-umbriel npm...

Malicious code in remark-markdownlint-capella-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de9166b3835951835342cf08b9670e0fdccfae51b57ad4dfa313de94f2739e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111579

Malicious code in loop-style-loader-webpack-promise npm...

EUVD-2025-116353

Malicious code in auth0-jsonp-promise-buffer npm...

Malicious code in prompts-zenobia-promise-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2597941e827037dc95c37d6ce60f562a41e408f869d847205cfe66fc276023d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-framework-promise-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08b47433d07003e13f2c30807743c8b152d09fb9ce52429e162877aedcc69d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112250

Malicious code in jasmine-promise-fornax-jekyll npm...

EUVD-2025-124760

Malicious code in mongoose-koa-jekyll-promise npm...

EUVD-2025-115041

Malicious code in configstore-xenon-promise-jest npm...

EUVD-2025-121870

Malicious code in socketio-less-pino-promise npm...

EUVD-2025-114264

Malicious code in eclipse-alphard-promise-commitizen npm...

EUVD-2025-113041

Malicious code in grunt-promise-vuetify-middleware npm...

EUVD-2025-111209

Malicious code in meteor-cross-env-promise-comet npm...

EUVD-2025-123291

Malicious code in promise-aether-private-non-blocking npm...

Malicious code in quito-sequelize-process-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a364f0c2f21a239ce270b172475644f8ad2280cdbb911451b5f5295a5b4c6d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113269

Malicious code in gatsby-fork-soap-promise npm...

EUVD-2025-120982

Malicious code in umbriel-promise-castor-spectron-webdriver npm...

EUVD-2025-123287

Malicious code in promise-cressida-link-html-webpack-plugin npm...

MAL-2025-143315 Malicious code in hermes-development-virgo-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9ebfa206b435c81a56d67d919dc4e28ddfda901b05abe2419b067e8de16f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...