MAL-2025-187741 Malicious code in lepton-cache-soap-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540a8b1aab1653ea9186f5db7ed0ff5ad6f8e7fb307f940830c94da18ed1a149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178132

Malicious code in less-cluster-soap-firebase npm...

Malicious code in sails-soap-link-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1eacbc309f43b7b1aa6ae69633d9efe8c8721438d82fdf6da228ed4f8738927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177063

Malicious code in prettier-stylelint-soap-acamar-build npm...

EUVD-2025-175933

Malicious code in titan-soap-request-framework npm...

EUVD-2025-179779

Malicious code in chalk-soap-eris-mini-css-extract-plugin npm...

EUVD-2025-176314

Malicious code in soap-winston-thuban-pyxis npm...

EUVD-2025-175854

Malicious code in typeorm-xanthus-solis-soap npm...

Malicious code in postgres-soap-apex-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b86a98a2d226d8686f0c0bfd665e59b9bb161862d45d5139f58b48ca662cedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lepton-cache-soap-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540a8b1aab1653ea9186f5db7ed0ff5ad6f8e7fb307f940830c94da18ed1a149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178564

Malicious code in helios-jekyll-polaris-soap npm...

EUVD-2025-176322

Malicious code in soap-comet-adonis-karma npm...

EUVD-2025-176319

Malicious code in soap-nconf-europa-kronos npm...

EUVD-2025-176841

Malicious code in quasar-robotics-soap-winston npm...

Malicious code in soap-odin-config-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5fb11eb83b83b17a16cb7ae6c6f075d0c88452e612dcd5a1b07ea5cc8eab15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179258

Malicious code in dotenv-safe-parsec-soap-polaris npm...

MAL-2025-187207 Malicious code in graphql-npm-soap-fermiparadox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56716e434cd1c5a44faa2761e4607685f3dc1bfd3de906c84be90f3ba243a05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188003 Malicious code in metabolomics-octans-soap-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1129f0e41c2b3a17aa60e8ab3ae6076953be4f3882077300095a37d4d48c2647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185408 Malicious code in airbnb-mini-css-extract-plugin-centauri-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 827f6e45379c72e896fa2c8a42159e2ada3a7553eef28d5b9d72873afc1ac74f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189034 Malicious code in quasar-robotics-soap-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf869e7625d64431a49efb119397803362e8d03292cfed0a621e19d3d58e102a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...