MAL-2025-147930 Malicious code in shelljs-ultra-venus-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9801de5bef0e92a080f705b4bb2e883cb39029e1d4442212140cd55decd2c408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-yildun-fornax-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a40d1de5b24dbb448475870ce97fffe04c4ed911b649262851e279fd42ab9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121997

Malicious code in shelljs-prompts-meteor-pavo npm...

Malicious code in scorpius-shelljs-jekyll-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206761eea86e0acc5e9e66bb149cf3e1e19395ab125b5a7270552f20ea581f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-shelljs-phoenix-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4e1017c23cd53607be3402508b6ffbe4c1cd96616b24e3103727f4e6ff2d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122014

Malicious code in shelljs-bootes-regulus-sedna npm...

MAL-2025-149878 Malicious code in zephyr-airbnb-procyon-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b9ef6c0754649729eb5f9e2c42335591b0d749077825d24757eea9c21d2a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116203

Malicious code in backend-yildun-fornax-shelljs npm...

EUVD-2025-113090

Malicious code in gravity-csrf-shelljs-celeste npm...

EUVD-2025-120054

Malicious code in zephyr-airbnb-procyon-shelljs npm...

EUVD-2025-121996

Malicious code in shelljs-sagitta-forever-iota npm...

EUVD-2025-115982

Malicious code in bootstrap-shelljs-enif-cassini npm...

MAL-2025-147928 Malicious code in shelljs-sedna-kaus-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bd92185d5df059e6ea16e930861c0940b5e505fc65388e18f02aa9ea6e53dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149193 Malicious code in vortex-vulcan-commitlint-config-angular-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488fcc3bef6ab42a047caf3a6e9d707eefc126e0dd734eaaaaa3ea53b5b917f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115682

Malicious code in carina-rocket-shelljs-rimraf npm...

EUVD-2025-122413

Malicious code in rollup-plugin-async-shelljs-procyon npm...

EUVD-2025-123184

Malicious code in proxima-shelljs-rate-limiter-standard npm...

EUVD-2025-121991

Malicious code in shelljs-warp-mongoose-betelgeuse npm...

EUVD-2025-112723

Malicious code in hugo-io-commitizen-shelljs npm...

EUVD-2025-114780

Malicious code in css-minimizer-webpack-plugin-meissa-shelljs-tailwindcss npm...