MAL-2025-146464 Malicious code in prettier-dagda-repository-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe057c006669f901ff3deb8a2322a85cfa4150b203802604340759d1d0e7a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142016 Malicious code in eleventy-zenobia-repository-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae2136e5bdbd05221b678c962214e1a8d32d1041f90059c0e5d329e1d48d0c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112948

Malicious code in halley-repository-dorado-cluster npm...

MAL-2025-149535 Malicious code in winston-yaml-webdriver-mocha-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2aafd2c598a36174246ed2a93655569ec5e247c8ea65d7573cc259e57155be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142673 Malicious code in foundation-sync-jwt-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0763efc2d7e662922249fb41abf295d83acb6a6eeaac78e28e2930207857b575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144317 Malicious code in less-loader-cross-env-nebula-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f025b35fb83b50288be5f6c7f07f992e963b337094085def0b5a13b58ea2631f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121436

Malicious code in telesto-element-ui-sedna-repository npm...

Malicious code in scorpius-betelgeuse-repository-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81293ced15c162c3d772014dd627c146e6a5c2e5189fbff9ecfce8e25026940d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120060

Malicious code in zenobia-repository-leda-transport npm...

EUVD-2025-123916

Malicious code in pavo-pino-pretty-chariklo-repository npm...

EUVD-2025-124865

Malicious code in miranda-repository-adonis-apollo npm...

EUVD-2025-115446

Malicious code in chalk-xanthus-repository-carpo npm...

Malicious code in docusaurus-repository-impulse-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b041baa180dd909147d42e4b74573836fe84449fd82cc2c1c5dd75ed722833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121787

Malicious code in spectron-webdriver-restart-cluster-repository npm...

EUVD-2025-116575

Malicious code in apollo-repository-uglify-js-nextjs npm...

Malicious code in wasat-restart-loglevel-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574c669fccaa341ec62ffab852152064911a73868724f75a4af37737a8830674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-npm-nova-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c5f0fef0802f17d6acba2e736999a4bbcaa1d25cac8d3897d67847a0380ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-pyxis-browserify-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570287166fcb791ea4017fecd25e850fdc1cd20d3560c668487e56d642a49b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120177

Malicious code in xo-repository-chai-subscription npm...

Malicious code in chalk-xanthus-repository-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e114af5f4c3f34ce30645b799ef566a3aed7d0a103b438d1a2fc83cca45530d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...