EUVD-2025-121859

Malicious code in socketio-webdriverio-mira-stop npm...

EUVD-2025-112222

Malicious code in javascript-stop-solis-magellan npm...

EUVD-2025-121993

Malicious code in shelljs-ultra-venus-stop npm...

EUVD-2025-123608

Malicious code in pm2-sqlite-got-stop npm...

Malicious code in bootes-stop-transform-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20374e8caf0bd75d4edba32a6b2f96df1c8c8e237574c8e0c54b06adb98a25e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121632

Malicious code in stop-duplex-cz-conventional-changelog-quark npm...

EUVD-2025-121173

Malicious code in tool-stop-magellan-jekyll npm...

EUVD-2025-121621

Malicious code in stop-start-link-shelljs npm...

MAL-2025-148291 Malicious code in stop-colors-native-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab01a52a3f41b139889ce3357bc601b3f2ca49d5a2913f21185e024b9c3e0aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149482 Malicious code in winston-cache-stop-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e071bb2c1f6703bd47158b0614599e4b4b79ec46dff64657405fff609fcec1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111282

Malicious code in meissa-sirius-mensa-stop npm...

EUVD-2025-116897

Malicious code in achernar-stop-octans-public npm...

MAL-2025-149296 Malicious code in wasat-npm-frontend-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ed7cb4dd2e77f6c32dce0cf92384b480709d841e5b7d1d22b7f7ac3f73bedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124275

Malicious code in norma-json-stop-quantum npm...

MAL-2025-146313 Malicious code in pm2-sqlite-got-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d538eb2a77f07a4d82c2dc92a67f5740e341cb37992ad8e0cac69335ae315904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145902 Malicious code in orbit-carpo-stop-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc73fb28f30595738f9102c7e9d6150fe6f8e4e3776f6c4746ad2042242533f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146701 Malicious code in protractor-ursa-stop-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013a698a464cce2a500f25f760be7bc42e4cbb17330e537716c604dc84004c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112177

Malicious code in jest-testcafe-stop-mutation npm...

EUVD-2025-122624

Malicious code in request-kronos-elektra-stop npm...

MAL-2025-140143 Malicious code in browserify-stop-sagitta-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fb65db83237cfff58b0e4af1e88a81f87370bff46c3902bb7ae2cd9deb6959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...