EUVD-2025-180014

Malicious code in blueshift-toml-bellatrix-blueshift npm...

MAL-2025-189060 Malicious code in radiant-toml-primatology-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e736c0f15dac33a2a045f08b15563499e027f9774ffeffc83ca24ee39b69a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175927

Malicious code in toml-jwt-docusaurus-celeste npm...

EUVD-2025-175926

Malicious code in toml-protractor-spinner-inflation npm...

EUVD-2025-175740

Malicious code in vega-toml-hexo-quito npm...

EUVD-2025-178434

Malicious code in impulse-toml-despina-bootes npm...

EUVD-2025-175928

Malicious code in toml-json-express-event npm...

Malicious code in electron-pm2-toml-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f39fb8a9d75395b1785a187dc32fd7123d42ea214d0d3cd4f9526ff421b0a685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186021 Malicious code in castor-cosmology-planetology-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0793b946fb175d66296827fcb218b871018110b0a8b6cfd2e04dfd5583e18fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178586

Malicious code in hawkingradiation-ora-celeste-toml npm...

Malicious code in toml-superflare-rollup-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2095f2a643f3176f7194ca9b7fb58c358babba6c0b9e2607bb10894b52696ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuepress-toml-magellan-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73486af759f7bf45f85de2534aee0ca48048d4c03aafacd5b532d679496ef3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179861

Malicious code in castor-cosmology-planetology-toml npm...

EUVD-2025-176153

Malicious code in subscription-interstellarmedium-toml-neuromorphic npm...

EUVD-2025-177944

Malicious code in markdownlint-rollup-loglevel-toml npm...

EUVD-2025-177274

Malicious code in pegasus-toml-neptune-nightwatch npm...

MAL-2025-188807 Malicious code in prettier-plugin-markdown-toml-reveal-md-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff999735f3feba34d19df5a1438749dc0508d8d6210fbc23713452c707547b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178509

Malicious code in html-webpack-plugin-deimos-toml-command npm...

EUVD-2025-177024

Malicious code in procyon-yaml-figures-toml npm...

MAL-2025-189948 Malicious code in toml-jwt-docusaurus-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7137e5c7ace789bdd6841a632b7672fbf80556d0ed465fd3a20160f1b2d3d500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...