Malicious code in dotenv-parse-variables-axios-rimraf-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74e83a98501868b14b36dc23df3d406f687182616811541cd1317ec9c0d1129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111984

Malicious code in kastra-pyxis-materialize-socketio npm...

EUVD-2025-111881

Malicious code in lacerta-apex-weywot-socketio npm...

EUVD-2025-121864

Malicious code in socketio-proxima-ini-venus npm...

EUVD-2025-115394

Malicious code in chariklo-socketio-json-readable npm...

EUVD-2025-113498

Malicious code in fornax-corvus-socketio-antd npm...

EUVD-2025-123147

Malicious code in publish-auth-nova-socketio npm...

EUVD-2025-122046

Malicious code in sequelize-socketio-juno-andromeda npm...

EUVD-2025-121881

Malicious code in socketio-adonis-neptune-reveal-md npm...

EUVD-2025-122260

Malicious code in sass-loader-cassini-socketio-wasat npm...

EUVD-2025-121874

Malicious code in socketio-eslint-koa-typeorm npm...

EUVD-2025-122847

Malicious code in react-bootstrap-socketio-nestjs-jsonp npm...

EUVD-2025-121882

Malicious code in socketio-acamar-pino-ceres npm...

EUVD-2025-115616

Malicious code in castor-ophiuchus-socketio-puppeteer npm...

Malicious code in altair-procyon-impulse-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de5f3663de96a20cf01a988ffb3549bcad8ba1ba022d315dcd7dd91abb96a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113173

Malicious code in global-karma-socketio-algol npm...

EUVD-2025-122129

Malicious code in sedna-socketio-cli-scorpius npm...

Malicious code in socketio-draco-blitz-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c180c7a73b5e53a5f51dde7e339af90597e7d2ba561bb2a7f5d61e4aa5b6accc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-cross-env-socketio-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afebe0b6d512b1d735f630ee7d5d374f7dcbef74fdc224df629708d129a90740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140491 Malicious code in castor-ophiuchus-socketio-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89628c22eecadb0e3a72e314b6f2162c8d82153b70aa48aa99188ce9a8832469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...