EUVD-2025-122875

Malicious code in rate-limiter-rimraf-kastra-eris npm...

MAL-2025-148189 Malicious code in spinner-configstore-lynx-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ae63f9bdf59bd6c85aee247ecc80ee241e3e6ca01ddf21e3b29e53c823f97d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112540

Malicious code in indus-perseus-publish-rate-limiter npm...

MAL-2025-147190 Malicious code in rehype-typeorm-rate-limiter-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d96fef6502b7d80768f460d033cc48a5035c10338d164870a174486af09ced8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122876

Malicious code in rate-limiter-postcss-vega-chromedriver npm...

EUVD-2025-111855

Malicious code in leda-bulma-rate-limiter-delphinus npm...

EUVD-2025-121938

Malicious code in slides-hydra-cordelia-rate-limiter npm...

EUVD-2025-122732

Malicious code in rehype-typeorm-rate-limiter-koa npm...

Malicious code in pino-rate-limiter-nconf-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2007d321e467534524557879fce285a8b90bc93b51de29e08cc7ab4b7383440d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114657

Malicious code in dactyl-rate-limiter-janus-spica npm...

EUVD-2025-122892

Malicious code in rate-limiter-babel-package-ursa npm...

EUVD-2025-121903

Malicious code in soap-husky-playwright-rate-limiter npm...

EUVD-2025-122642

Malicious code in repository-prompts-rate-limiter-passport npm...

MAL-2025-146247 Malicious code in pino-pretty-xerxes-rate-limiter-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f043826a25c7da3cdd55c99f153dec6113f5ea3f9ca3403c70b26604911cf129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140208 Malicious code in bulma-chalk-rate-limiter-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16bbf56c33e1c969c874d1a9534c05a591a456bf9708031149daceb8627a3044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147033 Malicious code in rate-limiter-carina-despina-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d89afb49e1baf7114e84e9d0a8e776e8bd8a7494a4fcaa12145552f4ec4505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123184

Malicious code in proxima-shelljs-rate-limiter-standard npm...

MAL-2025-147099 Malicious code in redis-europa-nodejs-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e6c8ec825ff834f3e5e8833c43a6562685e59b8c189ec4687da1cad6bfd3a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147030 Malicious code in rate-limiter-babel-package-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c012dab347c3e3e7f352b84d6995cf56ed90b0ff646e3e3fcdaa6e351c7310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141482 Malicious code in dagda-rate-limiter-webpack-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9db708a3dfc3a2df8e8c12f9f220aadbc59488cd39507f0da1c86bc814b40e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...