MAL-2025-140034 Malicious code in blaze-uglify-js-schema-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8d5f1ce6793923e6a5f433e28c137a347dd3e3071b1cfcf658b2ec25fcd7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141384 Malicious code in cygnus-subscription-sqlite-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e2511e9f9a27ff95e6c98e35f610b47432ec0f22b1470e637ebe6d56afe7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143950 Malicious code in jovian-izar-subscription-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8681257e1e1eff9e0b4be2eb9aaee7190c6c99222e20e0f2d9e0508d2fee6c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124685

Malicious code in mutation-tailwindcss-websockets-subscription npm...

Malicious code in chai-sedna-configstore-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8db186b19b6b9034186b75352f2f8ba47791d89f3232c2472ed5c907aab10f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121562

Malicious code in subscription-octans-toml-magellan npm...

EUVD-2025-121559

Malicious code in subscription-test-protractor-blitz npm...

Malicious code in subscription-apollo-hermes-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a045b40b3cf853afbaa7ab26e9964cb442500499698e1c895db995b6ca412f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112675

Malicious code in hydra-canopus-subscription-fornax npm...

EUVD-2025-121113

Malicious code in triton-dynamo-draco-subscription npm...

EUVD-2025-121563

Malicious code in subscription-non-blocking-auth0-wolf npm...

EUVD-2025-124077

Malicious code in ophiuchus-spectron-webdriver-subscription-rocket npm...

EUVD-2025-116467

Malicious code in async-pm2-subscription-vuepress npm...

MAL-2025-141529 Malicious code in delphinus-subscription-mongodb-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac142598e41e269f280ed6117a0efa39ee9665215459c5818a45e39613e47f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115654

Malicious code in carpo-subscription-meteor-bootstrap npm...

EUVD-2025-121972

Malicious code in sirius-gatsby-subscription-nodemon npm...

EUVD-2025-116639

Malicious code in antd-phoebe-puppeteer-subscription npm...

EUVD-2025-121569

Malicious code in subscription-ganymede-npm-terser npm...

EUVD-2025-121079

Malicious code in typeorm-lynx-subscription-sagitta npm...

EUVD-2025-120855

Malicious code in ursa-schema-norma-subscription npm...