Malicious code in html-webpack-plugin-epimetheus-async-vega (npm)

Source: amazon-inspector 40fb35774bf18006575735aea11ab5c4dcb09ac172c921835ee6157fbd4dccbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in async-vega-jupiter-mensa (npm)

Source: amazon-inspector c64c3ff0fcaa999f368800299f9e3b6834bddc93d44ffefadbd20b354fdb971a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-116464

Malicious code in async-vega-jupiter-mensa npm...

EUVD-2025-112752

Malicious code in html-webpack-plugin-epimetheus-async-vega npm...