EUVD-2025-114703

Malicious code in cypress-repository-rimraf-nebula npm...

Malicious code in xenon-repository-radiant-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46799f01c1add7c954c79d53f8c463356b37c7c7e01ecf694e3104e98508858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114393

Malicious code in dotenv-parse-variables-deneb-lyra-repository npm...

EUVD-2025-114434

Malicious code in docusaurus-repository-impulse-yakutsk npm...

EUVD-2025-114322

Malicious code in draco-altair-repository-kinetic npm...

EUVD-2025-115632

Malicious code in cassini-repository-miranda-nightmare npm...

EUVD-2025-113687

Malicious code in farout-repository-deneb-farout npm...

Malicious code in meissa-async-meissa-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873b499bb8e3a912398350cdd8e55638214ddd9feea30efe08c7940413b2bdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146363 Malicious code in polaris-repository-ignite-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae54010ef3eed19bcf96488eff384a8b20c5631c658cf381d8e92f2484cdaff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143164 Malicious code in halley-repository-dorado-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f75725f9f75ccb932f7dbc086b96c3076af491dada30ce8ea604a5c2071120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123751

Malicious code in phoebe-pipe-repository-spectron npm...

MAL-2025-140694 Malicious code in chariklo-deneb-helmet-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28478627d626861b611cc3756365e1c59d62e7aa61b91eb8fd25ec2727fb6a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141406 Malicious code in cypress-repository-rimraf-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 120b754154b050cce9db7fc61ab5ceeebb7e8904a40f6acc9e1bddec0640021a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141787 Malicious code in draco-altair-repository-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39da5b7d66f058158f9338114fef59667d4d5f153c6d1ee354332defe2171e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-npm-nova-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c5f0fef0802f17d6acba2e736999a4bbcaa1d25cac8d3897d67847a0380ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind-purple-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5c16558a076087c67c07733dd5d026ae9d399fad0f129b20f1455d41212350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean-peach-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f0eb8e7ff15d8e0b06a0bee607b728ac17fc1c07735ace0058a7f88a933806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rear-plum-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ffd81f1734d7fa552bd5594dc59d95992e061a66053a76bc90bccdf93c4904d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117291

Malicious code in interesting-tan-roadrunner npm...

MAL-2025-138814 Malicious code in international-copper-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916ae4b0421509f4ca33a2a4902c5e06743b2fc8024e87e93e03c921007496fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...