EUVD-2025-124038

Malicious code in ora-europa-tool-norma npm...

EUVD-2025-121191

Malicious code in tool-jabbah-promise-charon npm...

EUVD-2025-115635

Malicious code in cassini-nebula-sequelize-tool npm...

Malicious code in postgres-pavo-tool-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2addda10f23ed7cb19188abda0a250d743d2adbdd413ab1c73bcc665ff6803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111123

Malicious code in mini-css-extract-plugin-redis-tool-ignite npm...

EUVD-2025-113654

Malicious code in fetch-socketio-cosmiconfig-tool npm...

Malicious code in xenon-tool-acamar-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfa2fd7bf73fe49b6548a52cd6ba56ffcb1fef7d9aed7304babf08c7991af3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-altair-tool-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfcb585bb376fa6399f28e68f625a5eba7bfffbda84afbbf3dbf4877a5a221f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116008

Malicious code in bootes-tool-ophiuchus-webdriverio npm...

EUVD-2025-114941

Malicious code in corvus-tool-eris-uninstall npm...

EUVD-2025-120362

Malicious code in writable-izar-tool-cli npm...

MAL-2025-149776 Malicious code in yakutsk-postgres-tool-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8249a23f43ad24e6e3e5262de5dd34c85e91c3d96c59f35164cdc3b1899fb203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149569 Malicious code in writable-izar-tool-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3b84bb1c43acd9f7be1bce6187dc6ca90f1e0eda7e28ed138936ede9ac43384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141913 Malicious code in electron-eslint-aether-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d1f7548f783c12e5c8d0c42b73eac3624796ce6e399f4eba565d01f3f352840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140810 Malicious code in cli-sedna-xo-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea95c52ea49932e465b636027c985528b53c29b37dbe031de9640b0ba8b01cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143219 Malicious code in heka-tool-fornax-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f8bd622c042375df8054a2714cc5559b394b0284100a27f4096c2744dab285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148744 Malicious code in tool-nconf-uninstall-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee5451848821f91944130f40d2773f898a24946c94bc868c73c1fea30875de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

TOR Virtual Network Tunneling Tool 0.4.8.20

Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow...

CVE-2025-49145

Combodo iTop is a web based IT service management tool. In versions prior to 2.7.13 and 3.2.2, a user that has enough rights to create webhooks mostly administrators can drop the database. This is fixed in iTop 2.7.13 and 3.2.2 by verifying callback signature...

Malicious code in wibowo-bakwan40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ee19b9ad1e3687a5ca28e380d5b2f1a69698444c934a9ad2e520168fe54e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...