EUVD-2025-116319

Malicious code in avior-rollup-stop-zephyr npm...

Malicious code in carpo-init-stop-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5641579cbb1411c260c4a54abdf90d3def958523a27947118360caa005c2f5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-slides-mutation-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16cf9fc366dd5ff0fe93b35dc17840cbedf1102436fa9b3b5ef24c002963679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121631

Malicious code in stop-firebase-mira-ophiuchus npm...

EUVD-2025-121634

Malicious code in stop-colors-native-sedna npm...

EUVD-2025-115336

Malicious code in chromedriver-fornax-stop-apex npm...

EUVD-2025-113720

Malicious code in express-pyxis-sails-stop npm...

Malicious code in dotenv-safe-hermes-config-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248187bf030771f9566389c31563af67e13a9128c4ca8fa87fd4661d089c596d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121620

Malicious code in stop-thuban-fetch-electron-builder npm...

Malicious code in stop-google-magellan-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7160e38108659c54f1103cd1042f9139fba98b7b6fdbadbf9c5691b01e5cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121630

Malicious code in stop-flare-graphql-webdriverio npm...

EUVD-2025-115961

Malicious code in browserify-stop-sagitta-sirius npm...

Malicious code in zephyr-lynx-stop-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198e05e3ff5f3efe1c27864a86183b3a8341b6df02cd8b7e97369ce5dd3f42d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-playwright-proxima-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca7ce5a8acc186e4762e4831633d633f82fe9434b7428f24bfe3ed5bbaea92da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112034

Malicious code in jwt-magellan-sedna-stop npm...

EUVD-2025-111675

Malicious code in lint-hapi-stop-nightwatch npm...

EUVD-2025-123912

Malicious code in pavo-stop-aether-indus npm...

EUVD-2025-120293

Malicious code in xanthus-stop-antares-carina npm...

Malicious code in winston-cache-stop-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e071bb2c1f6703bd47158b0614599e4b4b79ec46dff64657405fff609fcec1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-firebase-mira-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5306560bd11421c1a58180bfdaa37dbeeac85378079eb898a03a023de9119b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...