MAL-2025-186811 Malicious code in eridanus-paleoceanography-blitz-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb0760eec369a6a11d2cab8c3756d2a182fb378a1df24edce74a41659dbbafc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188314 Malicious code in node-sass-blitz-paleobotany-decoherence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b43637647ec10057b71123e304940b13b2033812622a4b8310d8e491678fe8af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186993 Malicious code in firebase-selenology-blitz-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba84248994554254847bbbe7d4d7c2dffadaba57bdad95b53540b7220944baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112010

Malicious code in karma-electron-builder-blitz-lacerta npm...

EUVD-2025-124485

Malicious code in nightmare-event-blitz-cosmiconfig npm...

Malicious code in blitz-koa-umbra-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737b7cf294e87c05036c5c575e26b364c9f2e68a45faceeedc422a66b098830d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112124

Malicious code in jsonp-blitz-cordelia-less-loader npm...

EUVD-2025-112343

Malicious code in jabbah-blitz-oauth-publish npm...

EUVD-2025-114684

Malicious code in cz-conventional-changelog-nashira-blitz-terser npm...

EUVD-2025-115778

Malicious code in callisto-cygnus-supervisor-blitz npm...

EUVD-2025-123166

Malicious code in public-cors-blitz-loopback npm...

EUVD-2025-122045

Malicious code in sequelize-spectron-webdriver-blitz-ursa npm...

EUVD-2025-115692

Malicious code in carina-meissa-element-ui-blitz npm...

EUVD-2025-124703

Malicious code in mui-vuepress-blitz-weywot npm...

EUVD-2025-111491

Malicious code in magellan-blitz-atlas-child-process npm...

EUVD-2025-114925

Malicious code in cosmiconfig-hexo-blitz-tethys npm...

EUVD-2025-114150

Malicious code in element-ui-blitz-rehype-perseus npm...

EUVD-2025-116051

Malicious code in blitz-magellan-betelgeuse-equinox npm...

Malicious code in blitz-thuban-mongoose-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a38b52da158ae13c533abaa878bd0546783bdc722f4e37c25cb1f7735c7199a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-solis-mdx-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac0a972116745bee47e642e59aeb49f9ef45e7048afbf60a8face542146c8f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...