Malicious code in yonder-polaris-loopback-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f79d04e4807dd38afa59089ccfeb76f68af1b43076a330232e0bbe21e1da2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123751

Malicious code in phoebe-pipe-repository-spectron npm...

EUVD-2025-122652

Malicious code in repository-loglevel-node-config-react-bootstrap npm...

EUVD-2025-122442

Malicious code in rocket-server-repository-janus npm...

Malicious code in subscription-playwright-mui-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3008a23f4cfdb2580eeb64864c68b8e25c16b631c7028a73cb15f99eac3e0852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-farout-nightwatch-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3ce96e3b741714e24b907bf10a467fdea25a56b6283e5557181041c9c11b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-repository-radiant-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46799f01c1add7c954c79d53f8c463356b37c7c7e01ecf694e3104e98508858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113497

Malicious code in fornax-csrf-buffer-remark npm...

EUVD-2025-122656

Malicious code in repository-global-commitlint-radiant npm...

EUVD-2025-116833

Malicious code in aldebaran-cache-repository-npm npm...

EUVD-2025-114393

Malicious code in dotenv-parse-variables-deneb-lyra-repository npm...

EUVD-2025-123458

Malicious code in prettier-dagda-repository-quito npm...

Malicious code in repository-prompts-rate-limiter-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf377bb81f4927325b2351ce7a12400024c12876e52b462e3cd4f8643761011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122653

Malicious code in repository-less-loader-wolf-reveal-md npm...

EUVD-2025-122646

Malicious code in repository-optimize-css-assets-webpack-plugin-comet-fork npm...

Malicious code in halley-repository-dorado-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f75725f9f75ccb932f7dbc086b96c3076af491dada30ce8ea604a5c2071120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122613

Malicious code in request-repository-meissa-ursa npm...

MAL-2025-144317 Malicious code in less-loader-cross-env-nebula-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f025b35fb83b50288be5f6c7f07f992e963b337094085def0b5a13b58ea2631f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149535 Malicious code in winston-yaml-webdriver-mocha-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2aafd2c598a36174246ed2a93655569ec5e247c8ea65d7573cc259e57155be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142016 Malicious code in eleventy-zenobia-repository-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae2136e5bdbd05221b678c962214e1a8d32d1041f90059c0e5d329e1d48d0c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...