EUVD-2025-120667

Malicious code in warp-build-postcss-loader-semantic-release npm...

Malicious code in capella-axios-build-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de1782855692574879b52f874525f81e799648d8226dcd053e2552dc17fcfb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122248

Malicious code in sass-loader-magellan-build-reveal-md npm...

EUVD-2025-115919

Malicious code in build-loopback-transform-publish npm...

Malicious code in framework-nuxtjs-sedna-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5259e841b741ad81487bbaa050e3336e687c0db66022001ceb0831d8feb00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-writable-grus-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc35fc95967e6792a523b2b50ca9116565941ee17151c3a44088bee86775c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113413

Malicious code in frontend-build-css-loader-europa npm...

EUVD-2025-115915

Malicious code in build-quantum-alphard-figures npm...

EUVD-2025-122039

Malicious code in sequelize-version-build-thuban npm...

EUVD-2025-123970

Malicious code in parcel-build-castor-prompts npm...

EUVD-2025-122196

Malicious code in scripts-build-ganymede-altair npm...

EUVD-2025-113582

Malicious code in flare-hugo-build-loopback npm...

EUVD-2025-112519

Malicious code in ini-middleware-build-xo npm...

EUVD-2025-115920

Malicious code in build-figures-module-acamar npm...

EUVD-2025-113721

Malicious code in express-odin-hermes-build npm...

Malicious code in pegasus-callback-build-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa451bc61732e3800480939f0e2c59aacea12ed0549347ad33424411dbe39b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113734

Malicious code in express-fetch-build-auth0 npm...

MAL-2025-141984 Malicious code in element-ui-spinner-bootstrap-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955b49c0bd95c502fd03223c8164d7331c570f17e89327a7346c250f55ee2f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111745

Malicious code in levels-yaml-build-shelljs npm...

MAL-2025-142072 Malicious code in envconfig-csv-build-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa540d749d3bafec4df5a69032f942824402ebe3bf915276f5f9071e5251564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...