EUVD-2025-123109

Malicious code in publish-shelljs-hexo-css-loader npm...

EUVD-2025-123121

Malicious code in publish-pipe-antares-shelljs npm...

EUVD-2025-111179

Malicious code in meteor-shelljs-miranda-oauth npm...

Malicious code in delphinus-ariel-apex-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b947a9067e09e6ea0296b684556baf143d2ae93eb8a8041dc79efe79f7e54ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111607

Malicious code in loglevel-hydra-lyra-shelljs npm...

EUVD-2025-114780

Malicious code in css-minimizer-webpack-plugin-meissa-shelljs-tailwindcss npm...

EUVD-2025-121998

Malicious code in shelljs-procyon-jsonp-nova npm...

EUVD-2025-111258

Malicious code in mensa-passport-module-shelljs npm...

Malicious code in remark-shelljs-phoenix-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4e1017c23cd53607be3402508b6ffbe4c1cd96616b24e3103727f4e6ff2d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122007

Malicious code in shelljs-install-shelljs-proxima npm...

EUVD-2025-122001

Malicious code in shelljs-nestjs-orbit-release-it npm...

Malicious code in scorpius-shelljs-jekyll-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206761eea86e0acc5e9e66bb149cf3e1e19395ab125b5a7270552f20ea581f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122002

Malicious code in shelljs-mongodb-eridanus-gemini npm...

EUVD-2025-121991

Malicious code in shelljs-warp-mongoose-betelgeuse npm...

EUVD-2025-121994

Malicious code in shelljs-tailwindcss-lint-proxima npm...

MAL-2025-139197 Malicious code in achernar-geckodriver-element-ui-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f1253be5da971749704f5a0ca7b1672c8b75855e91d121c249fea900dfd15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121992

Malicious code in shelljs-ursa-fornax-luna npm...

MAL-2025-139199 Malicious code in achernar-hexo-betelgeuse-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22485d24156f5b7a844676474ff062663cacf70de836551462b306a1bc5dddbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149878 Malicious code in zephyr-airbnb-procyon-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b9ef6c0754649729eb5f9e2c42335591b0d749077825d24757eea9c21d2a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147927 Malicious code in shelljs-sagitta-forever-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8520a636888d2b5c6bf4dc6d1cfb48b131a6cb2490a7d3d5ada301ab554f0e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...