EUVD-2025-113350

Malicious code in gacrux-dagda-electron-builder-ultra npm...

EUVD-2025-115161

Malicious code in commitizen-ultra-event-dotenv-parse-variables npm...

EUVD-2025-112137

Malicious code in json-janus-ultra-aurora npm...

EUVD-2025-116400

Malicious code in aurora-odin-ultra-fomalhaut npm...

EUVD-2025-112409

Malicious code in io-pino-pretty-start-ultra npm...

EUVD-2025-116037

Malicious code in blitz-ultra-spinner-capella npm...

EUVD-2025-114427

Malicious code in docusaurus-winston-ultra-neptune npm...

EUVD-2025-121027

Malicious code in ultra-nightwatch-commitizen-javascript npm...

EUVD-2025-121034

Malicious code in ultra-gemini-elara-update npm...

Malicious code in ultra-gemini-elara-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1826034a534b444fe5c322a889eacae769fc5f1bc3335f37e8e0a0239945c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116219

Malicious code in backend-configstore-ultra-parcel npm...

EUVD-2025-121040

Malicious code in ultra-bootes-async-morgan npm...

EUVD-2025-121025

Malicious code in ultra-perseus-betelgeuse-leda npm...

Malicious code in restart-ultra-centaurus-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c0db9ddaddac7633e63071583d00d82037f15b75a57cb7b68e460390a99a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140230 Malicious code in bulma-ultra-meteor-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdfd1deafb4b573097ef89a887d9922514d7aceab4f029d5853fcc750934733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143648 Malicious code in inquirer-gemini-ultra-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b8c852905587eec75361da9869de6474a78215837a3989d078099f0705f454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-odin-ultra-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573ceb8c65851ee29f9c5c85b8287f247a6ea640fa648371b93ec85497355d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142851 Malicious code in gatsby-registry-quantum-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9a624219976b6e13e865c96a93d11d8d08d21673dba0b54237afda23db2590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144586 Malicious code in luna-ultra-fetch-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00ed8cbc51d9cd205cf472188ea84f2ab444b56ddf9af825ca395be404fd4c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142229 Malicious code in eslint-plugin-despina-xanthus-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94066a462de6a40ad0b3d6847519d8baee54111207505b5664c8c283d362ff05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...