MAL-2025-148260 Malicious code in standard-style-loader-flare-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9ab2321a1d8bba1e68a004f01d1aa6a51d88faeedf9b2d448f214e64125d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114280

Malicious code in dynamo-magellan-standard-dorado npm...

EUVD-2025-112140

Malicious code in json-figures-gatsby-standard npm...

Malicious code in grunt-astro-geckodriver-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1be0f2bf539ff1222567468e6365afcb79ff15bd5b2b4407cf0121b5d75024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-standard-octans-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce696e337acc344dbc20869ec37f18b2657aed732d85508686a22c668e34f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142584 Malicious code in fork-csv-standard-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207804b34c80b70376e5579f1c9e4b7c425db63c480b78e030d71008f1416272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148256 Malicious code in standard-markdown-pdf-lyra-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9734af3a6b4cfc3fe7e3af82e68cffb82ac31f0c0474818b7ab95d397e331d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121667

Malicious code in standard-rimraf-phoebe-local npm...

EUVD-2025-121293

Malicious code in tethys-standard-miranda-registry npm...

EUVD-2025-124111

Malicious code in ophiuchus-chai-standard-xanadu npm...

EUVD-2025-114729

Malicious code in cygnus-standard-apollo-mira npm...

EUVD-2025-120594

Malicious code in webdriver-manager-standard-rest-ini npm...

EUVD-2025-121664

Malicious code in standard-wolf-koa-commitlint npm...

EUVD-2025-111998

Malicious code in karma-phenomic-standard-mdx npm...

EUVD-2025-115703

Malicious code in carina-arcturus-standard-umbriel npm...

MAL-2025-148247 Malicious code in standard-airbnb-pulsar-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7bbc9a54197108d5227e17926f1c7b477b3b3c8dfe3b222333e539cd29d282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149090 Malicious code in vega-gatsby-backend-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef9239b9a48a8b8028f1bb79e1822e9bce3d82bdeba0246f6ac3e17e3a88318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115964

Malicious code in browserify-readable-mysql-standard npm...

EUVD-2025-111448

Malicious code in magellan-standard-izar-nashira npm...

MAL-2025-148691 Malicious code in titan-polaris-wolf-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cd593eb7cd0784d0722fc9a9b4d17c974690e19d815b6ecb4f18d1ba7ba392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...