EUVD-2025-111442

Malicious code in magellan-vortex-update-ganymede npm...

EUVD-2025-111440

Malicious code in magellan-webpack-global-vortex npm...

EUVD-2025-111421

Malicious code in markdown-pdf-metalsmith-vortex-geckodriver npm...

EUVD-2025-111353

Malicious code in mdx-comet-vortex-karma npm...

EUVD-2025-111287

Malicious code in meissa-prettier-plugin-markdown-celeste-vortex npm...

EUVD-2025-112175

Malicious code in jest-vortex-ini-foundation npm...

EUVD-2025-111937

Malicious code in kinetic-lint-staged-commitlint-config-angular-vortex npm...

Malicious code in airbnb-vortex-lint-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9266b166c4dea6a6abc04e078f1ea3067f96d87b4a0526a0e99ac96c7fe4705f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-loopback-typeorm-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10e2ce882a35af2827440b2150e881268e7afeb8bb1936417cdfd796f7f5ab4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-native-vortex-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cea674df46845fb77c13437ffe4d939741ffe9a2677b308288efb81c6c5ed58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-init-slides-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5365fb7829cfd8ab509782ae75c027abe5acf1c7227250c2f9bce12c2c4d1e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-ora-vortex-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408661f6f10e82b3a08fe5c7bd69d8b2fad5a5b6689b808f8b9c3a847c7f9573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-nconf-gemini-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdbfcb6b83ef7147b4041123d4274295e736f9b5059e57e55db63cc993bb9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-proxima-webdriver-mocha-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11534f986c769a549d28a9789876bdef3b468105ec0b90b7b0761a0e8c11c1a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-eleventy-protractor-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0798504104232bd981669802bf8d352aef1ac84de841bfc470416a94c4a6512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-vortex-ini-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57921d568b97d6d9305b1a5aa660dc2fc975b01045ac78e3fd2e0b5ed3a82d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-comet-vortex-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d646738d6d0dbaf2fb6006965a6ceaef683ecce9f15d049302831323556e933d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-supervisor-fornax-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61010f916d4168f9195bd75c485c5d125f4cfa390ab502895dfa7938f1a20b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-leda-mongodb-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdbe5ec481357f98d1df3769ba55b71340587a839440bd8eb579dcbdf91f8296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-venus-izar-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22743ffdcb88a3ad3f6bc32150254dadfa3f45695c7f11d0e9a16ea3ac1d126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...