EUVD-2025-112712

Malicious code in hugo-semantic-ui-halley-blitz npm...

EUVD-2025-115674

Malicious code in carpo-blitz-nightmare-forever npm...

EUVD-2025-114909

Malicious code in cosmos-blitz-got-cache npm...

EUVD-2025-120705

Malicious code in vulcan-blitz-got-configstore npm...

EUVD-2025-116037

Malicious code in blitz-ultra-spinner-capella npm...

EUVD-2025-123379

Malicious code in private-slides-postgres-blitz npm...

EUVD-2025-113711

Malicious code in farout-blitz-yildun-quito npm...

Malicious code in pegasus-impulse-grus-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6509545da991311d3beee8db0afc074abdfa583a2df12ad31f8434c955243b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116065

Malicious code in blitz-celeste-slidev-got npm...

EUVD-2025-115237

Malicious code in comet-config-pyxis-blitz npm...

EUVD-2025-112124

Malicious code in jsonp-blitz-cordelia-less-loader npm...

Malicious code in blitz-celeste-slidev-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42c639afb347d7ed48126244240c893feaf0e464a8b9357fc1bd5d35cf6d601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-blitz-atlas-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2340dbf5fc23d6a3011d549871d854a58569177ed1163b8a7fe224213778d119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120742

Malicious code in vortex-phenomic-schema-blitz npm...

Malicious code in update-procyon-ophiuchus-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0ae1c5ac94da1bccd61aa20af4df863fe32433ee4bd8eae2921ec6d0e22556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140046 Malicious code in blitz-hyperion-leda-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc31ae9cf161ca7962555f9633a5ace4c22399ad5c4806c8975a2c1802e17953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146543 Malicious code in private-slides-postgres-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5375be66b5a308c568af9c49e1f0e9f44a28b23494199dd3e641cb2a0f1f4993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140039 Malicious code in blitz-cosmos-scripts-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7abf3d475aa8bdb5e299992047446f1bb86e8719bc25a6918e7d6506d40ac41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140415 Malicious code in carina-meissa-element-ui-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ec01fdb272c022f85b84fab1b93bc5188f80ff33647b66131c09d9c4b5c438d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148991 Malicious code in update-blitz-karma-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbaebc82b8eaa16346846eed91be01bee36af4c22c983431ab8165b6d70592eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...