EUVD-2025-120443

Malicious code in winston-dactyl-figures-antd npm...

MAL-2025-149480 Malicious code in winston-blaze-convict-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9405a26bbb3c5e2d9aa7aa5ddcb59c8ca86b807d28d65fb2f0a57974e0bc26b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149482 Malicious code in winston-cache-stop-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e071bb2c1f6703bd47158b0614599e4b4b79ec46dff64657405fff609fcec1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120399

Malicious code in winston-update-aldebaran-chakra-ui npm...

Malicious code in winston-ariel-apex-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65d3c62bcd298d1d1cbacd3bbd8e0e3d53e25357922f0774f4abcfe97f47eae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-ora-polaris-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5fb3d2b6cc8472f5b6a43dd86e1ce3f8fd4d3aaba4f83deca9ca99ee64f6f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123411

Malicious code in prettier-stylelint-mysql-ultra-winston npm...

EUVD-2025-123926

Malicious code in pavo-delphinus-winston-link npm...

EUVD-2025-120397

Malicious code in winston-wasat-frontend-hyperion npm...

EUVD-2025-123868

Malicious code in pegasus-spectron-jupiter-winston npm...

EUVD-2025-120434

Malicious code in winston-gulp-test-rest npm...

EUVD-2025-120417

Malicious code in winston-neptune-vuepress-chakra-ui npm...

EUVD-2025-120449

Malicious code in winston-bootes-package-postgres npm...

MAL-2025-144475 Malicious code in lint-winston-browserify-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f6d475b0ea7203ceb3c07f5ffa5db59ffbef110b3585646afc0d02eb097dd7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142817 Malicious code in ganymede-prompts-winston-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d922a8b575251ccd228020bd96d9fc1ecd073d80ad488afda156f36546484946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139384 Malicious code in andromeda-puppeteer-winston-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da7751df8e8035a7d7a1e041dcaa9f572e67a2ba46dc6c4d55f8b77556815e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149203 Malicious code in vuetify-blaze-wezen-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acd317c6a436af395b26d7399e04af36ed8f51614a95c8d7125b905ab6a7f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-wasat-frontend-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1e87b3b20c2fe6fcc2a57079c6652db190328cca043eca984aa1659c223725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120433

Malicious code in winston-heka-loglevel-altair npm...

MAL-2025-140067 Malicious code in blitz-winston-vuetify-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545cd37a3003e0332a5956fb7b350048ecd2cc8fbaf2458e305ce077db3e275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...