EUVD-2025-112460

Malicious code in inquirer-optimize-css-assets-webpack-plugin-umbra-repository npm...

EUVD-2025-112388

Malicious code in iota-fomalhaut-less-loader-repository npm...

EUVD-2025-112308

Malicious code in janus-dorado-repository-soap npm...

EUVD-2025-112281

Malicious code in janus-sails-repository-repository npm...

Malicious code in apex-websockets-bellatrix-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d07b72c3f5eb73e5033d0289424e9a6446f69a95e66a24abcc4276a7233776a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-mocha-atlas-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd2746d873666f4365b41ed0fc9271d71a3480d6f86e815799cf9954bfa49b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-publish-markdown-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6c37dc5bc5d8fcb554dbf6f064affdc92e9b34a5aeca6ceebbeee20d52be0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-xanthus-repository-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e114af5f4c3f34ce30645b799ef566a3aed7d0a103b438d1a2fc83cca45530d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-repository-impulse-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b041baa180dd909147d42e4b74573836fe84449fd82cc2c1c5dd75ed722833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-repository-dorado-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f75725f9f75ccb932f7dbc086b96c3076af491dada30ce8ea604a5c2071120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-pyxis-browserify-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570287166fcb791ea4017fecd25e850fdc1cd20d3560c668487e56d642a49b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-jabbah-chakra-ui-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d5f738782dd363d152db805403c855d082f0f118291fd3c2a9d542055b894bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-async-meissa-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873b499bb8e3a912398350cdd8e55638214ddd9feea30efe08c7940413b2bdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-global-promise-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c94e7b9cf8e7ef681f2d8b9d20af61cfbb0ab1bd542dbba0f84d592e384c12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-repository-adonis-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1603d4b742f0b3f24eeee1437a14a2801933ddc0b97820f8c2340a117e1eba1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-eridanus-jabbah-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf8e91c6a667fe241fd67d4152b461ba2a0c007607acea3a94c86dcbddc4247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-nodejs-umbriel-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c976dc4e8caa65dad055cd3ea3b6bd8738c7eb21895548d493f81de4dcd32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-antares-command-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3d5b92538efc5003fd39ea6c07c4688b0790c70dbc5345a0b1bfbaa470acab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-prompts-rate-limiter-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf377bb81f4927325b2351ce7a12400024c12876e52b462e3cd4f8643761011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-farout-nightwatch-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3ce96e3b741714e24b907bf10a467fdea25a56b6283e5557181041c9c11b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...