Malicious code in tool-nconf-uninstall-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee5451848821f91944130f40d2773f898a24946c94bc868c73c1fea30875de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-umbra-spectron-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536e47fdfce250fe64bd38d1a246f1fe8af603ae7131fd0af3df43f6ca78d261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122358

Malicious code in sadr-jest-tool-wezen npm...

EUVD-2025-121175

Malicious code in tool-semantic-ui-loop-eslint-config npm...

EUVD-2025-115875

Malicious code in bulma-tool-yakutsk-lacerta npm...

EUVD-2025-121135

Malicious code in transport-mensa-tool-yakutsk npm...

Malicious code in pino-apollo-radiant-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5f932b5ebb57daa130c09dd46c1291c44a6c1335243a2913ffd76e0abde8be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124171

Malicious code in oberon-parcel-titan-tool npm...

EUVD-2025-116142

Malicious code in bellatrix-tool-hyperion-prettier-stylelint npm...

EUVD-2025-113536

Malicious code in forever-tool-achernar-bellatrix npm...

Malicious code in vuetify-tool-markdown-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df5522b27f532b5a84611c13fc2498ead6787a837ac1cc588850e5b2f14bf20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114092

Malicious code in enceladus-alphard-tool-dione npm...

EUVD-2025-116033

Malicious code in bootes-aldebaran-link-tool npm...

EUVD-2025-123515

Malicious code in postcss-loader-quito-iota-commitizen npm...

EUVD-2025-114457

Malicious code in dione-tool-exec-achernar npm...

Malicious code in dione-tool-exec-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0ede422a77bce351eab9cf913afa16a03cefcaf54961116943e70c3e322778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115136

Malicious code in commitlint-config-angular-ultra-ariel-nodemon npm...

Malicious code in tool-rocket-impulse-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da69e02ea1de6c0283031e9f19b73ff166dcc8006bfd5f7ab0b19b6d484ba878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124595

Malicious code in nconf-prettier-jekyll-jasmine npm...

Malicious code in tool-dotenv-safe-deimos-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53dd26ce16209c77a21640e06bf2d7589940321cc0ca582d08066c674a8639be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...