MAL-2025-187677 Malicious code in kernel-promise-proxy-xml-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbcf722d296a805c892de52ff3cd2ad37ac131c515bfb952e27dae7d017d108d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115852

Malicious code in bunyan-promise-mongoose-restart npm...

EUVD-2025-114071

Malicious code in enceladus-ultra-promise-helios npm...

Malicious code in taurus-mdx-promise-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c325e367241c5e965dea2194667e8e615c49c2186c63d7e8bff622220960ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123272

Malicious code in promise-standard-phoenix-venus npm...

EUVD-2025-112375

Malicious code in iota-proxima-luna-promise npm...

EUVD-2025-113701

Malicious code in farout-dotenv-parse-variables-umbriel-promise npm...

EUVD-2025-123282

Malicious code in promise-global-wolf-arcturus npm...

Malicious code in deimos-juno-sails-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e4b06a4470db17fd32754a1e07a0049aa27cd7bbe27db48e0a893f47e90d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116669

Malicious code in antares-promise-thuban-ora npm...

EUVD-2025-123281

Malicious code in promise-graphql-start-superagent npm...

EUVD-2025-122810

Malicious code in redis-promise-sails-umbra npm...

Malicious code in meteor-cross-env-promise-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb174c4e59f8d419248b9974b4055adfa5d6c0cb04323bb9ba94eea030294ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123278

Malicious code in promise-meteor-dotenv-antd npm...

EUVD-2025-114797

Malicious code in css-loader-procyon-promise-taurus npm...

EUVD-2025-112977

Malicious code in halley-dotenv-parse-variables-hermes-promise npm...

Malicious code in grunt-promise-vuetify-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7391023fb97db27e60952bee597e73cca8d4958978321dea8fc85e8695ad64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116691

Malicious code in antares-gravity-local-promise npm...

EUVD-2025-115025

Malicious code in convict-promise-transform-weywot npm...

Malicious code in promise-delphinus-dotenv-parse-variables-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca332e25d9d61085e10b8a93b01916326bfcc7343eb2d74d224e9fe7cfc7db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...