EUVD-2025-121643

Malicious code in start-stop-terser-hermes npm...

EUVD-2025-121616

Malicious code in stop-zenith-auriga-dotenv-parse-variables npm...

EUVD-2025-111824

Malicious code in leda-regulus-standard-stop npm...

EUVD-2025-120459

Malicious code in wezen-uglify-js-stop-regulus npm...

MAL-2025-141131 Malicious code in cors-redis-stop-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65e1430ff5f3905e4cbe0ad81e4243e56ae4777ae305b05edf937249950fc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146372 Malicious code in polaris-stop-build-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a373d1a5eb1fb842a336b3d3996d1ff50d85dbdbcf45ce246eec4e06c9cda3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145381 Malicious code in neptune-stop-semantic-release-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854d36ed66287193682ff19d42027a1746c092392f6048ce77b2adf23c3031f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147930 Malicious code in shelljs-ultra-venus-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9801de5bef0e92a080f705b4bb2e883cb39029e1d4442212140cd55decd2c408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140092 Malicious code in bootes-stop-transform-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20374e8caf0bd75d4edba32a6b2f96df1c8c8e237574c8e0c54b06adb98a25e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141125 Malicious code in cors-ganymede-typeorm-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64aedef6ebfc41d40cb33e4a35f8db70ca590c8af93ee332b2eb454941e6fb14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121603

Malicious code in stream-link-stop-csrf npm...

EUVD-2025-120345

Malicious code in xanadu-async-prompts-stop npm...

EUVD-2025-123221

Malicious code in protractor-ursa-stop-sedna npm...

EUVD-2025-114978

Malicious code in cors-redis-stop-alphard npm...

EUVD-2025-121684

Malicious code in sqlite-stop-blitz-morgan npm...

EUVD-2025-124164

Malicious code in oberon-sedna-css-loader-stop npm...

EUVD-2025-115930

Malicious code in buffer-stop-dynamo-docusaurus npm...

Malicious code in stop-transform-ultra-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b60d96dbe7f22ec72e5b3eff029c03cfadfbbdce6f395bc6655514b781d5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121625

Malicious code in stop-package-phenomic-cz-conventional-changelog npm...

Malicious code in sqlite-stop-blitz-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8827208887d475e0e416b194ba336bf49e238e51cccf1d36e5c344c213c13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...