MAL-2025-147930 Malicious code in shelljs-ultra-venus-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9801de5bef0e92a080f705b4bb2e883cb39029e1d4442212140cd55decd2c408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139199 Malicious code in achernar-hexo-betelgeuse-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22485d24156f5b7a844676474ff062663cacf70de836551462b306a1bc5dddbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121998

Malicious code in shelljs-procyon-jsonp-nova npm...

EUVD-2025-122014

Malicious code in shelljs-bootes-regulus-sedna npm...

Malicious code in shelljs-csv-antares-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e0289f23944cbef7e11f6498fa51536ecbbbd7d2ea016eb28509e35c602277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-shelljs-vega-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744231827bd2a82b04772b377409872008fb9107fe387353ebbc28a5be47aa13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115982

Malicious code in bootstrap-shelljs-enif-cassini npm...

EUVD-2025-122879

Malicious code in rate-limiter-lynx-shelljs-gulp npm...

EUVD-2025-122413

Malicious code in rollup-plugin-async-shelljs-procyon npm...

EUVD-2025-121997

Malicious code in shelljs-prompts-meteor-pavo npm...

EUVD-2025-113817

Malicious code in europa-start-shelljs-chromedriver npm...

EUVD-2025-122938

Malicious code in query-webdriver-mocha-version-shelljs npm...

EUVD-2025-111231

Malicious code in metalsmith-nashira-antares-shelljs npm...

EUVD-2025-122011

Malicious code in shelljs-europa-cosmiconfig-concurrently npm...

EUVD-2025-122003

Malicious code in shelljs-markdown-webdriver-mocha-prettier-stylelint npm...

EUVD-2025-123352

Malicious code in process-shelljs-neptune-taurus npm...

EUVD-2025-123109

Malicious code in publish-shelljs-hexo-css-loader npm...

EUVD-2025-113163

Malicious code in global-shelljs-socketio-passport npm...

EUVD-2025-121994

Malicious code in shelljs-tailwindcss-lint-proxima npm...

MAL-2025-146366 Malicious code in polaris-shelljs-jekyll-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de091a3968f27ce74c81fbe514c2fa98c46ffdd8b63a1a10948c72140895732c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...