EUVD-2025-111666

Malicious code in lint-staged-carpo-webdriver-mocha-start npm...

EUVD-2025-111648

Malicious code in lint-staged-start-electron-builder-spectron npm...

Malicious code in start-ursa-nodejs-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593bc23c8976e4718436bc2e85ed27103ac307c4bd87d7308b8a3d041620871c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121784

Malicious code in spectron-webdriver-start-docusaurus-sails npm...

EUVD-2025-115165

Malicious code in commitizen-start-radiant-janus npm...

EUVD-2025-120196

Malicious code in xml-start-cosmiconfig-cypress npm...

EUVD-2025-121661

Malicious code in start-barnard-bellatrix-elektra npm...

Malicious code in meteor-start-aether-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9301d09568ade4960569bffbe5cb6360049a99677385189dd037333cb8cff6ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-start-node-sass-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38573d99689c86b79d69bf0aab74958277241d2f0c883b63abcc8d803cbd42d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111738

Malicious code in library-fornax-start-yaml npm...

MAL-2025-149116 Malicious code in venus-mocha-start-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d1cc69d270a33ba2ba84e61c8cfdd3271303ccc4b24590d7adc20af1c71d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121660

Malicious code in start-bootes-upgrade-subscription npm...

EUVD-2025-121582

Malicious code in style-loader-start-cressida-passport npm...

MAL-2025-144466 Malicious code in lint-staged-start-electron-builder-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e73ecafc9499e1568b2977d0dd9f18f353acbc15330cf67c197d36a5ffec75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147493 Malicious code in rollup-buffer-superagent-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c94961fce5ea04ac8cfdfb74d49339851ca055ba99c0a733abafa399d2879bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143237 Malicious code in helios-odin-start-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db7425d137324f44c522d980f0e97d5761901d2847c2349c5a0b5321bb8f47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148001 Malicious code in slidev-config-prettier-plugin-markdown-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945e834e497b6d587ec03ff3266acade36150e5844f41ba3cf81c5e4d8bed572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121760

Malicious code in spica-link-iota-start npm...

MAL-2025-147636 Malicious code in sails-atlas-achernar-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52caec3f9a9d5a52592f977db9cf92e3dbc550cb0fc4abd3df48b1d76a67c807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142600 Malicious code in fork-start-node-sass-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38573d99689c86b79d69bf0aab74958277241d2f0c883b63abcc8d803cbd42d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...