EUVD-2025-113781

Malicious code in event-transform-apex-child-process npm...

EUVD-2025-111436

Malicious code in markdown-apollo-transform-ora npm...

EUVD-2025-111278

Malicious code in meissa-supervisor-markdown-transform npm...

EUVD-2025-112230

Malicious code in javascript-nightmare-lint-staged-transform npm...

EUVD-2025-112084

Malicious code in juno-levels-bunyan-transform npm...

Malicious code in altair-chai-transform-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e57b70246ceb72a49720b47e3ecfd3567bcccae73b01aba9d723cd8ba9b6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-stop-transform-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20374e8caf0bd75d4edba32a6b2f96df1c8c8e237574c8e0c54b06adb98a25e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-astro-changelog-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6efd41f89e1f4813626936bd4429f05995210039bb5ea8841fb974a5dad146b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-transform-apex-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8329d07d153602e53d39e6ab9792a42a05d33fe8f6d9b74237d2d37676bac1ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-scorpius-toml-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7daf0e843578606a660a5a5683f1243e6794785cedd068b8403e79e4357aa2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-epimetheus-transform-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e3d5027fe575e774c42be59151b712d7df1bf2876ab3c75535e3bdafa0779b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-transform-google-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbfa1c849b8cb20cc8ce270cbf9982ba6f0e50f6009a690a43118dd3260ece1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-supervisor-markdown-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60cdc4d5317b650a261573ff13fe8a451e6e91f68730697fa7045ac908f307e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-transform-firebase-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91201b5cfb0d545ae12aa908cc7d5b24f7c6833ace2ac82fb6c44e9dce3b5bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-transform-jsonp-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3eebc16db6952b19d5daf098a0e91751627b8bea0d3fc10c37376b8ca1d6998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-zenobia-transform-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc9d78b1d33903534b438b07e80362725df7927b6669515c8fbac5965d6d3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-development-transform-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9970fc2cf7485e3a83f92015f3ef345dc16d84cdf3b6f96adcc69731705a2da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-exec-sedna-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c197068d113d6fb425ad560ce788a7d3859d52375822f5b3b1355ca92c26473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-writable-farout-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf92cfdd8e9ba325f1984bdf4531e1434e357d88a197cb1fa814f03eb07ac4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-xo-eridanus-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb820e1534cb90c0d94a2ead0284f4c60efdbb87ab1d40999e2915c495e6557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...