EUVD-2025-114029

Malicious code in envconfig-neptune-supervisor-lint npm...

EUVD-2025-120350

Malicious code in writable-supervisor-zenobia-blaze npm...

EUVD-2025-113885

Malicious code in eslint-plugin-apollo-supervisor-aquarius npm...

EUVD-2025-121535

Malicious code in supervisor-corvus-css-loader-spinner npm...

EUVD-2025-122008

Malicious code in shelljs-hydra-element-ui-supervisor npm...

EUVD-2025-116660

Malicious code in antares-supervisor-kinetic-nodemon npm...

EUVD-2025-121526

Malicious code in supervisor-publish-cosmos-tethys npm...

EUVD-2025-124673

Malicious code in mysql-farout-morgan-supervisor npm...

EUVD-2025-123240

Malicious code in protractor-dynamo-lyra-supervisor npm...

EUVD-2025-111370

Malicious code in materialize-lint-staged-supervisor-astro npm...

MAL-2025-148951 Malicious code in uninstall-acamar-supervisor-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465df38a02f20b2ca2a8a698edc1288e4f1dce24d0e7da6a996f5d02dacbfec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123274

Malicious code in promise-rimraf-supervisor-graphql npm...

MAL-2025-142250 Malicious code in eslint-supervisor-rollup-plugin-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35eaf1dd0ae02b839f771c4647f77510a80e88ff4c7236de32a826f8b817cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147446 Malicious code in rimraf-carpo-eleventy-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a305a7e1a5fdd412809153cc81b7c65e5acaa9f0851fbe9d306ff17e64c9098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140812 Malicious code in cli-supervisor-meissa-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ded4cfab8e2f8639c75038f912fc662017e8aaf4dfc60ff97515f615d09a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146026 Malicious code in pegasus-envconfig-wasat-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb3c8a932b15d91dfb13038e031e46cecbe14cba78be0527c74a12a035d982c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142935 Malicious code in global-fornax-supervisor-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0acf146c879312a52c4a11dfd8019469b166ba992f23e25b1a184a8024ba6b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140046 Malicious code in blitz-hyperion-leda-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc31ae9cf161ca7962555f9633a5ace4c22399ad5c4806c8975a2c1802e17953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142327 Malicious code in event-supervisor-eslint-config-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f9d2558669f4486f9e0526eb7585e053c2ee108448dc16a4490384a0cb5163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147456 Malicious code in rimraf-ophiuchus-supervisor-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d161a75cd81a68198bf33a6437867de29c56abdc2d8d0f24e783ec8aa5a713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...