EUVD-2025-115494

Malicious code in chakra-ui-eslint-toml-react-bootstrap npm...

EUVD-2025-121562

Malicious code in subscription-octans-toml-magellan npm...

EUVD-2025-122081

Malicious code in semantic-ui-concurrently-enceladus-toml npm...

EUVD-2025-124305

Malicious code in non-blocking-meissa-toml-vortex npm...

EUVD-2025-113534

Malicious code in forever-webpack-toml-rest npm...

EUVD-2025-116914

Malicious code in acamar-toml-hexo-algol npm...

EUVD-2025-121211

Malicious code in toml-lynx-pavo-sadr npm...

EUVD-2025-113168

Malicious code in global-norma-toml-cypress npm...

EUVD-2025-111640

Malicious code in lint-toml-janus-cross-env npm...

Malicious code in hyperion-epimetheus-pavo-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b404989c9a1d427012806d7077db62f06671feb52518ff7466c725f691c6259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-install-express-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec57c878f1c91a3125ce5d22ce4ca93c160d03d8b9c78e896caf971f7b8fb83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142951 Malicious code in global-toml-vuepress-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a8cdb722e96e67d2348f504d26379d9b7b8862df3266e39cbf1756954a7aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144669 Malicious code in magellan-toml-pyxis-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6dc533b7eafd1a447732d5171a98cc252177054638dda40dfda403bdeecec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121225

Malicious code in toml-changelog-umbra-rimraf npm...

EUVD-2025-111766

Malicious code in less-toml-antares-halley npm...

EUVD-2025-112085

Malicious code in juno-leda-pino-toml npm...

EUVD-2025-111949

Malicious code in kinetic-betelgeuse-relay-toml npm...

Malicious code in atlas-rest-quantum-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9902762b166cf43320d02a48cffdb04c5ee77d718482f98ae39137072d974b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-fork-umbra-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ed6fff075c7c8191f5bb8ca9ceae5566724e352dfc03429d19a8afd34aefc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-scorpius-toml-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7daf0e843578606a660a5a5683f1243e6794785cedd068b8403e79e4357aa2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...