EUVD-2025-124896

Malicious code in miranda-cache-relay-non-blocking npm...

EUVD-2025-124306

Malicious code in non-blocking-magellan-carpo-aldebaran npm...

Malicious code in tethys-non-blocking-hexo-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d885f6678a047d144fa23ca12189e3691db1ed724e104927120acef8a43c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-superagent-non-blocking-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8ddc615a56e7e150a01de9f37fb83d259b5816386456335a484c9eaeb10f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148992 Malicious code in update-chai-non-blocking-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf2732f6a507f3ea2e09ca7ff7251f8705a48a4d88fad8e4c2827383fd31c15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124303

Malicious code in non-blocking-phoenix-figures-algol npm...

EUVD-2025-124290

Malicious code in non-blocking-writable-soap-element-ui npm...

EUVD-2025-120200

Malicious code in xml-non-blocking-unuk-sirius npm...

EUVD-2025-124311

Malicious code in non-blocking-hapi-less-package npm...

EUVD-2025-111772

Malicious code in less-non-blocking-run-script-xanthus npm...

EUVD-2025-111698

Malicious code in link-non-blocking-query-canopus npm...

EUVD-2025-112635

Malicious code in hyperion-hermes-oauth-non-blocking npm...

EUVD-2025-112483

Malicious code in init-quito-farout-non-blocking npm...

Malicious code in auth-non-blocking-ini-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0b15945d56e729cf31bab7127c7e22fea1f173b7506f6861413ee2005b0fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-less-express-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562a2f28d71d1862fe1f923bc1ffe145c137be676be0bd1b77de0183b4bddd86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-janus-non-blocking-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e967f7af12b0fb31e73a1d41f54d76ec7e17f227ad7b707c8debcfc5dccdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-dotenv-safe-got-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ec042cfe2b369dc9c550415ab4881c8b222e5b9e1b1ffd6d863083eed4048b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-html-webpack-plugin-exec-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132d462cb3f8ba91cc11be917727ab1ca853b46458b018881fc53fadf941c0bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-ora-non-blocking-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72234f1311d1f62cd8d227441dd0e05d6145857f9cf50b8d867c692c33ba1a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-playwright-ini-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed04bcab08314eefd54ec25d25b978908a323fd77c17eb836416092414d907fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...