MAL-2025-141406 Malicious code in cypress-repository-rimraf-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 120b754154b050cce9db7fc61ab5ceeebb7e8904a40f6acc9e1bddec0640021a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141787 Malicious code in draco-altair-repository-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39da5b7d66f058158f9338114fef59667d4d5f153c6d1ee354332defe2171e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121953

Malicious code in sirius-repository-yaml-oberon npm...

MAL-2025-140694 Malicious code in chariklo-deneb-helmet-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28478627d626861b611cc3756365e1c59d62e7aa61b91eb8fd25ec2727fb6a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-despina-terser-webpack-plugin-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a9e70bfe7e9a27e65d6e249c139e61ded84d1402bfe4ba2ea4159d2615e06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114626

Malicious code in dagda-repository-postcss-loader-wolf npm...

MAL-2025-144472 Malicious code in lint-staged-xerxes-repository-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9139a900e53769bc31e4a3c68db8adba88b9271bf86ea79fda3761e3b0954062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120177

Malicious code in xo-repository-chai-subscription npm...

EUVD-2025-113898

Malicious code in eslint-config-thuban-repository-hexo npm...

Malicious code in webdriver-mocha-npm-nova-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c5f0fef0802f17d6acba2e736999a4bbcaa1d25cac8d3897d67847a0380ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141850 Malicious code in eclipse-forever-prompts-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2034ba99b3fac3845b32a389d7bd18a7f63cdd0abbde72b03416fab0083e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120324

Malicious code in xanadu-repository-csv-venus npm...

EUVD-2025-115951

Malicious code in buffer-canopus-winston-repository npm...

Malicious code in babel-element-ui-scripts-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebeca5dc51f6d677f9931369a829d3c0eb57c1863bb8ca1dfa8400cdcc5abf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145507 Malicious code in node-config-flare-elektra-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 152e0f9d53e98bcf6b041b29988e6f2da083d076da61a67d8b2c48005d4b7d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-bunyan-ophiuchus-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920091b85ec0f23f09f795c08c82cf697fa78950a8f13bb33dc691002b7e63c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121841

Malicious code in solis-repository-envconfig-exec npm...

EUVD-2025-122652

Malicious code in repository-loglevel-node-config-react-bootstrap npm...

EUVD-2025-115446

Malicious code in chalk-xanthus-repository-carpo npm...

Malicious code in dorado-leda-module-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473ac230a1d7605a528320678f1622a86249ae3a4271e3a13c1157044eb153a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...