Malicious code in fornax-commitlint-tool-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c66a4fed949a6c247a8e793979fb01e4d622f1b18b9cbe545578ff45b4dce3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123400

Malicious code in prettier-stylelint-tool-ora-solis npm...

Malicious code in corvus-tool-eris-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c70e245e0236f09ab23fa8be3ab93de3e17af4507ca9c2ea53298eb3bf1cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-alphard-tool-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc835461937ec8ab9e335744183882bfdb9da209471bb7b831e581a688188008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-kronos-cosmos-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed330d8af17fc20256082e46943972fa13d6525c3250e3a246e530e91f9ea48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121188

Malicious code in tool-link-hexo-aether npm...

Malicious code in nconf-tool-magellan-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68a8262a254f0a9406a021375b356e800849625b8e96972eca8a227193dce94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-tool-concurrently-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead08f96749eb8ecc215e7d6898f5f5f27989939a7586c619b9a3b01f5f1945d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121332

Malicious code in testcafe-hyperion-envconfig-tool npm...

EUVD-2025-115676

Malicious code in carpo-barnard-tethys-halley npm...

EUVD-2025-121180

Malicious code in tool-passport-sqlite-triton npm...

EUVD-2025-115384

Malicious code in charon-json-typeorm-nightwatch npm...

EUVD-2025-115653

Malicious code in carpo-tool-query-commitizen npm...

EUVD-2025-124814

Malicious code in module-frontend-toml-tool npm...

EUVD-2025-121179

Malicious code in tool-proxima-shelljs-corvus npm...

EUVD-2025-113865

Malicious code in eslint-plugin-tool-rest-firebase npm...

EUVD-2025-111327

Malicious code in meissa-altair-tool-node-sass npm...

EUVD-2025-111410

Malicious code in markdown-pdf-remark-oberon-phoenix npm...

EUVD-2025-111873

Malicious code in lacerta-geckodriver-tool-private npm...

Malicious code in tool-leda-mensa-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b95d1def0ebe38a27307afda5860d3791590b4b58b35ed77dd3d816d43a09c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...