MAL-2025-142927 Malicious code in global-csrf-xml-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a669302077b44dbbcb3bdfd3d6456495a67dbcffacbdef50b03e2fbf92f2b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120805

Malicious code in venus-subscription-pino-xml npm...

EUVD-2025-111661

Malicious code in lint-staged-despina-async-xml npm...

EUVD-2025-112778

Malicious code in hermes-xml-auth0-sirius npm...

EUVD-2025-120195

Malicious code in xml-tool-spectron-webdriver-antares npm...

Malicious code in sagitta-xml-child-process-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a994e3d9f806b277e2a6fe89497b8bd8b217966da20b43ec15ace8cfad2690ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122317

Malicious code in sagitta-lyra-leda-xml npm...

EUVD-2025-111903

Malicious code in koa-xml-chariklo-perseus npm...

EUVD-2025-120566

Malicious code in webdriver-mocha-xml-spica-wezen npm...

EUVD-2025-123207

Malicious code in proxima-fornax-lynx-xml npm...

EUVD-2025-115680

Malicious code in carina-xml-europa-cz-conventional-changelog npm...

Malicious code in venus-subscription-pino-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b084d77d240ddb72fc2468a96b8d733738ecf2c519fff700a0354752768c0774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112371

Malicious code in iota-spinner-dione-xml npm...

EUVD-2025-113733

Malicious code in express-ganymede-xml-betelgeuse npm...

EUVD-2025-120203

Malicious code in xml-bootstrap-dorado-writable npm...

Malicious code in loop-mensa-xml-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588fd6e066e2dd3092837d1df974d64a5ad7b55e0b95e3888d7853b746fbb1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120192

Malicious code in xml-ursa-uglify-js-zenobia npm...

EUVD-2025-113033

Malicious code in grunt-xml-mira-axios npm...

EUVD-2025-113746

Malicious code in express-andromeda-xml-miranda npm...

Malicious code in sagitta-lyra-leda-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb780c8c954985b5ef0b82b4a8234f723923b792e3b06ab8a105705d67ef2d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...