EUVD-2025-124069

Malicious code in ophiuchus-xml-sqlite-lyra npm...

EUVD-2025-121684

Malicious code in sqlite-stop-blitz-morgan npm...

EUVD-2025-121705

Malicious code in sqlite-ariel-spawn-castor npm...

EUVD-2025-115931

Malicious code in buffer-sqlite-lint-telesto npm...

EUVD-2025-124325

Malicious code in nodemon-sqlite-winston-webdriver-manager npm...

Malicious code in express-update-bellatrix-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b87c6eed1a187b8927f3cf388f2dcd18a6422b02b1c38bce55c20256d49f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-xanthus-proxima-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f32ccc9abe073ad5ce6305e68105a9f7b7780b19c76998a56b792af270ee0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146313 Malicious code in pm2-sqlite-got-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d538eb2a77f07a4d82c2dc92a67f5740e341cb37992ad8e0cac69335ae315904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121688

Malicious code in sqlite-release-it-markdown-pdf-comet npm...

Malicious code in sqlite-yakutsk-lynx-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b8b5a0c253c8e58cb6b450ec34b1b4da65da1afaadca90b314f6ee4c26df54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121681

Malicious code in sqlite-typeorm-fusion-terser-webpack-plugin npm...

MAL-2025-148228 Malicious code in sqlite-gemini-procyon-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33266839bd8ec4b49bd7e073f4cb98f476214e8f83e7217a1b25ce0b091c8219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145622 Malicious code in non-blocking-sqlite-toml-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2d064b51a14b25c29553073d981f25fb78805790a2a4cbb554a1dc26efbc8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139864 Malicious code in babel-jasmine-castor-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ddfcaa81c5d467716db5e44e99c6e24f2c2417a0d54a417a3582fd20187a2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147885 Malicious code in sequelize-webpack-electron-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c6cef0d1f5fa1940739aefd12c411b829bbad3d9b0e3e28cb1c8356f08516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146232 Malicious code in pino-pretty-frontend-sqlite-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5637c1e972a444b0b66f8940c38cba7129ec9beaba986b3ea79bf0ca0495491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140767 Malicious code in chromedriver-dione-server-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 976eaa90b831e7ef63ca530ab6f33c384b31fd9790980dc34cbec5848ef7813d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148221 Malicious code in sqlite-atlas-dynamo-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14187cef271cc4426484306893a6fee37db7948f0787533e5623a7551d59d9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148226 Malicious code in sqlite-event-nodemon-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68018707cd81a7cff1bfc2becc80cda5eb58c8d8c33a490decc2a5785a14804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148240 Malicious code in sqlite-spawn-ultra-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be06e9b3e8c2658261f00ccc757cc103e2be3f4c5ae7c655f5dd153755439ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...