EUVD-2025-122727

Malicious code in relay-auth-cassini-winston npm...

EUVD-2025-122749

Malicious code in rehype-impulse-webdriverio-auth npm...

EUVD-2025-121752

Malicious code in spica-postcss-init-auth npm...

EUVD-2025-112556

Malicious code in indus-auth-run-script-capella npm...

EUVD-2025-113362

Malicious code in fusion-xerxes-comet-auth npm...

Malicious code in hexo-json-auth-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8176ed21787b8042b7644509435dd8c82624164ccede2ee2697b1634227e21ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116380

Malicious code in auth-europa-json-cosmiconfig npm...

Malicious code in fusion-xerxes-comet-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf07766d12753bced2182938a506ecdf512d8e1d4fb358d5195008a425611e27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124179

Malicious code in oberon-centaurus-eclipse-auth npm...

EUVD-2025-113634

Malicious code in figures-perseus-auth-aquarius npm...

EUVD-2025-116370

Malicious code in auth-thuban-despina-io npm...

EUVD-2025-116441

Malicious code in atlas-terser-webpack-plugin-auth-rocket npm...

EUVD-2025-114585

Malicious code in delphinus-markdown-antd-auth npm...

Malicious code in ursa-auth-bunyan-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28eada95a2466abcf6454f804708ecb9d74a085996376d2b7ffcb5ca0835786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-non-blocking-ini-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0b15945d56e729cf31bab7127c7e22fea1f173b7506f6861413ee2005b0fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116376

Malicious code in auth-neptune-cypress-cordelia npm...

EUVD-2025-116710

Malicious code in antares-auth-thuban-semantic-release npm...

EUVD-2025-123114

Malicious code in publish-publish-auth-nestjs npm...

MAL-2025-145527 Malicious code in node-sass-auth-ursa-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d1d32c1b5d407a6418140a9935485f4f0908661c8b028023df0857f9c764648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148063 Malicious code in socketio-rollup-plugin-vuetify-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25cfe748bbdae6caba66a493bc7b808107e36ada1c4f2a6279623281fcff361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...