Malicious code in auth0-mutation-websockets-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a95486272da0dcb64f02df91085552ced1adeb9b08f616af39826bb91826831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123299

Malicious code in procyon-websockets-child-process-webdriver-manager npm...

Malicious code in orbit-websockets-scripts-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56dbc69781b4006e6aa721c82d0bbf279312f49f2d28c79b0fa5f0643fe9336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120508

Malicious code in websockets-google-markdownlint-inquirer npm...

EUVD-2025-124830

Malicious code in mocha-nightwatch-yildun-websockets npm...

MAL-2025-149419 Malicious code in websockets-dactyl-element-ui-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60df6ca1abf2df23e74ec069e81a2cd86a6d25bb74a68c80edb3ed26271c897e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-chromedriver-registry-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72fb32193ca623e4ca985339273e09aca585d4284dffb455bbcdd79c457663d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113861

Malicious code in eslint-spinner-websockets-frontend npm...

Malicious code in centaurus-websockets-enceladus-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c4fe990f20f5b2bf6fbfb73edd295ad5982a6f4f9067dbab39d5b66f8ba8176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-auth-websockets-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433a1f1238fa18babfb7cdb34edd93e4b23abddb489dead658c27f8f3aec0a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115819

Malicious code in cache-wasat-kronos-websockets npm...

EUVD-2025-120511

Malicious code in websockets-cluster-puppeteer-adonis npm...

EUVD-2025-122037

Malicious code in sequelize-websockets-uninstall-achernar npm...

Malicious code in buffer-hapi-rigel-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234a847915fb916fc1124bffbe53d55bdd12c690cd1d599a343da90e19e60111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121618

Malicious code in stop-websockets-spica-antd npm...

Malicious code in geckodriver-markdownlint-websockets-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c20cbf16548e1f3820842251aa3cb4b9c86abf2d55d1caa35218317b5fae029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114781

Malicious code in css-minimizer-webpack-plugin-hyperion-websockets-husky npm...

EUVD-2025-113239

Malicious code in geckodriver-markdownlint-websockets-repository npm...

EUVD-2025-121257

Malicious code in titan-auth-websockets-algol npm...

Malicious code in firebase-middleware-websockets-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965718b2e69e8cd0837618529f0dff3b16fdbfef7b4cc2473c9574fa1aed806c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...