Malicious code in spica-css-loader-testcafe-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36597f416ec7c190e827446bd569c4ad103c21ea45306506b1fa9419bb85a499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116220

Malicious code in backend-configstore-node-sass-firebase npm...

Malicious code in buffer-cypress-auth0-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0c18409218143999f63d9b4bb00c9a7582921a01c8ab912420d733ad20687d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111324

Malicious code in meissa-async-backend-scripts npm...

Malicious code in lacerta-backend-soap-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce45b105ded3fdee03065058388a88b616fc7fc15a7c590d40f9b00cc2169f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116213

Malicious code in backend-hyperion-nightmare-pipe npm...

EUVD-2025-116208

Malicious code in backend-phenomic-csrf-auriga npm...

Malicious code in backend-phenomic-csrf-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42052997348b7f8d46c2e3b6c0dd0e87440a0ca439cbd7931bb5b4ae3fd164e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116206

Malicious code in backend-ursa-achernar-react-bootstrap npm...

EUVD-2025-123998

Malicious code in package-avior-backend-release-it npm...

EUVD-2025-124493

Malicious code in nightmare-backend-babel-leda npm...

EUVD-2025-112394

Malicious code in iota-docusaurus-mdx-backend npm...

EUVD-2025-112150

Malicious code in json-backend-cluster-webdriverio npm...

EUVD-2025-113445

Malicious code in foundation-backend-enif-async npm...

EUVD-2025-112004

Malicious code in karma-gridsome-backend-hydra npm...

EUVD-2025-121767

Malicious code in spica-css-loader-testcafe-backend npm...

EUVD-2025-111490

Malicious code in magellan-cache-backend-halley npm...

Malicious code in backend-configstore-node-sass-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6b9ac0075b325abe952216f78ce9a11d4101d6d1aabdbee5e7aff20ac8216e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144614 Malicious code in lyra-phoebe-backend-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2214bbc2a0be5e2df1f0fc62f22f1d89844d530568150a57620e494ac832e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144109 Malicious code in karma-gridsome-backend-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310d0539043ad82350363d64d301dab21bc3058b5ed8f2b8c40789257f6e6992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...