Malicious code in castor-soap-venus-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9810db938434e1cce2fdb25f62d0c2a9fa081469eaffe65a318919342e0a74e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116587

Malicious code in apollo-hapi-soap-testcafe npm...

MAL-2025-148028 Malicious code in soap-nextjs-init-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35e009b07aa96f1cb8004669b245e171142af2ea87fd59386384974b1fd1199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116801

Malicious code in algol-node-config-soap-odin npm...

EUVD-2025-113731

Malicious code in express-ini-soap-local npm...

EUVD-2025-112232

Malicious code in javascript-loglevel-chalk-soap npm...

EUVD-2025-122874

Malicious code in rate-limiter-soap-colors-testcafe npm...

Malicious code in magellan-deneb-schema-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f46a774c7288c4cc97d52bc84d10a0b31b9feedccf4ebf3896b2cc9e478509a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114793

Malicious code in css-loader-soap-elektra-andromeda npm...

Malicious code in wezen-soap-grus-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c969ec135ea0e9b782b9b6c0dec74f9cd771881a5044ff40e24e14d193616bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148030 Malicious code in soap-pavo-terser-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ffff8cf6a504a54d7a9a9b8193efbb4dfc00ae43a56bc384e678ccea487576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111778

Malicious code in less-loader-toml-private-soap npm...

EUVD-2025-112256

Malicious code in jasmine-meissa-soap-protractor npm...

EUVD-2025-123770

Malicious code in phoebe-fusion-soap-stop npm...

EUVD-2025-114177

Malicious code in electron-soap-magellan-heka npm...

EUVD-2025-112682

Malicious code in husky-upgrade-soap-jekyll npm...

EUVD-2025-120180

Malicious code in xo-metalsmith-soap-yakutsk npm...

EUVD-2025-120999

Malicious code in umbra-octans-soap-jekyll npm...

EUVD-2025-114065

Malicious code in enif-cosmos-soap-zephyr npm...

MAL-2025-148034 Malicious code in soap-sass-loader-sirius-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c32a09e8e53f322f5f79220d387b7048fd9677cf8dcdbd54dacdef9d18be785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...