Malicious code in tool-dotenv-safe-deimos-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53dd26ce16209c77a21640e06bf2d7589940321cc0ca582d08066c674a8639be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-command-geckodriver-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d4c1dfd04a531ec9f0f8abdf611775cc1f6fb6b997f973bad24c056990bfcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121198

Malicious code in tool-cache-jasmine-link npm...

EUVD-2025-112640

Malicious code in hyperion-eslint-config-oberon-babel npm...

EUVD-2025-114685

Malicious code in cz-conventional-changelog-markdown-metalsmith-commitizen npm...

EUVD-2025-120707

Malicious code in vuetify-tool-markdown-apollo npm...

EUVD-2025-113003

Malicious code in gulp-avior-dependencies-tool npm...

Malicious code in despina-fusion-typeorm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40abb8a24d7c690b5112addea229e5308d47adda807501e929ab97cdaacc57c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121177

Malicious code in tool-rocket-impulse-dotenv npm...

EUVD-2025-115298

Malicious code in cli-sedna-xo-tool npm...

EUVD-2025-122043

Malicious code in sequelize-tool-gemini-arcturus npm...

Malicious code in node-sass-tool-resolvers-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9d82b37f041e55c54c357d2b3f2c7cac2a2ca7af9a206f536e6ad03b700b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-jabbah-elektra-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b1393ad21c122c488010604c363c0c5385feb33514676d1aaa1a267fa1ed98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113234

Malicious code in geckodriver-pino-cz-conventional-changelog-tool npm...

EUVD-2025-116588

Malicious code in apollo-halley-cosmiconfig-cypress npm...

EUVD-2025-121185

Malicious code in tool-magellan-weywot-superagent npm...

EUVD-2025-121190

Malicious code in tool-kronos-cosmos-sass-loader npm...

EUVD-2025-121197

Malicious code in tool-command-geckodriver-atlas npm...

EUVD-2025-121818

Malicious code in spawn-tool-concurrently-umbra npm...

MAL-2025-146236 Malicious code in pino-pretty-hyperion-terser-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df02f906063e61b6da517aab704a23c427a3b32691080d2fd2055d4a068aefe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...