Malicious code in sagitta-standard-corvus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684ec4b83b999e47fc32ae82653f9e30c77edeedfd6d936996de857e670e4d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116443

Malicious code in atlas-standard-global-jekyll npm...

EUVD-2025-120839

Malicious code in vega-gatsby-backend-standard npm...

EUVD-2025-111998

Malicious code in karma-phenomic-standard-mdx npm...

Malicious code in telesto-sails-bootes-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d609428dc28221939fc9494afcdd831c1230dcb226b52ce23422c34b259723c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115980

Malicious code in bootstrap-standard-yonder-miranda npm...

EUVD-2025-122095

Malicious code in semantic-release-impulse-taurus-standard npm...

Malicious code in markdownlint-standard-run-script-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c922258173b565aad147f7ab8c8f6e2bd3797075453bb4b7d65c9e6481e66d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116372

Malicious code in auth-radiant-kastra-standard npm...

EUVD-2025-113558

Malicious code in fomalhaut-standard-slidev-achernar npm...

EUVD-2025-124586

Malicious code in nconf-winston-standard-alphard npm...

Malicious code in markdown-pdf-callisto-lint-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb134446e468c46e4ca3d83d7094d21bafd81c5f717f091744634024b17d9c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121946

Malicious code in sirius-standard-mensa-element-ui npm...

EUVD-2025-121171

Malicious code in transform-apex-sadr-standard npm...

EUVD-2025-114351

Malicious code in dotenv-safe-lint-standard-stream npm...

EUVD-2025-112262

Malicious code in jasmine-fetch-standard-terser-webpack-plugin npm...

EUVD-2025-111656

Malicious code in lint-staged-gridsome-less-loader-standard npm...

EUVD-2025-121677

Malicious code in standard-aquarius-css-loader-webdriver-mocha npm...

MAL-2025-147178 Malicious code in rehype-nextjs-xenon-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d727a33ec08ff0d055e7f2c12a05f0637219bcf225ace11ae4c8b75402577cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141158 Malicious code in corvus-loopback-yildun-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6529875bab3e3c2ea80662f8dd0237daf2d1c13aca1fa24ecbfe0e6a13e213d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...